In June 2011, the official vsftpd download server (hosted on SourceForge) was compromised. An attacker replaced the legitimate vsftpd 2.3.4 source code with a backdoored version. Any server that ...