| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Kajal Agarwal Tamil Sex Stories In Peperonity.com !exclusive! »Websites like Pratilipi Tamil, Wattpad, and Scribd host thousands of amateur and professional Tamil web series updated daily. This collection of romantic fiction explores alternate universes, extended cinematic storylines, and original narratives inspired by Kajal Aggarwal’s iconic screen presence in Tamil cinema. Dive into a world where silver-screen chemistry transforms into deeply evocative prose. Chapter 1: The Modern-Day Myth – A Maattrraan Epilogue Kajal Agarwal Tamil Sex Stories In Peperonity.com Below is a collection of her most impactful romantic arcs in Tamil cinema: Kavalai Vendam Websites like Pratilipi Tamil, Wattpad, and Scribd host As Nisha, her role in this blockbuster added a touch of romance to the action-thriller genre, highlighting the "opposites attract" dynamic. 3. Themes in Kajal Aggarwal’s Romantic Fiction Websites like Pratilipi Tamil
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |