Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: VSFTP Backdoor in Source Code - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
VSFTP Backdoor in Source Code

There have been reports this weekend of hacked websites that are serving up source code for VSFTP that contain backdoor code.  The compromise has been confirmed by the programs creator.  Thanks to benm for providing the heads up for the compromise.


Deb Hale


279 Posts
ISC Handler
Jul 5th 2011
this happened to proftpd last year.

it's a good thing i use a linux distribution that isn't very susceptible to package tampering, unless i stray from official sources.

Sign Up for Free or Log In to start participating in the conversation!