| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Sex Stories In Kannada In Kannada Language Kannada Fonts Only LinkLove stories set against the backdrop of Karavali or Ugadi festivals. Kannada romantic fiction, as a genre, emerged much later, in the 20th century. The early 20th century saw a surge in the popularity of novels and short stories in Kannada, which catered to the growing demand for romantic fiction. Writers like M.S. Ramesh, K.S. Nisar Ahmed, and T.S. Nagabharana were among the pioneers of Kannada romantic fiction. Their works were widely read and appreciated, and they paved the way for future generations of writers. Love stories set against the backdrop of Karavali 1. ಗ್ರಾಮೀಣ ಸೊಗಡಿನ ಪ್ರೇಮ ಕಥೆಗಳು Writers like M ಕನ್ನಡ ರೋಮ್ಯಾಂಟಿಕ್ ಫಿಕ್ಷನ್: ಒಂದು ಅವಲೋಕನ Nagabharana were among the pioneers of Kannada romantic The journey of romance in Kannada begins with the mystic Vachanas of the 12th century, where poets like Akka Mahadevi wrote of her divine, intense love for Lord Chennamallikarjuna. While spiritual, the raw passion and rebellion against societal norms laid the foundation for romantic expression. #KannadaStories #RomanticFiction #KannadaLiterature #LoveStories #ಕನ್ನಡಕಥೆಗಳು #ಪ್ರೇಮಕಥೆ #ಕನ್ನಡ #StoriesKannada specific theme Writers are now using "Instagram Kannada" (a mix of Roman script and Kannada words) to reach younger audiences, but the soul remains the same. AI narration is making these stories accessible to the non-literate Kannada speaker, and streaming services are adapting these novels into web series.
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |