A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Desibfcom New

To understand the value of the update, let's compare it to similar Desi adult platforms:

Are you trying a new Ayurvedic routine or exploring a hidden weekend getaway? Let us know in the comments! Why This Post Works (Blogger’s Tip) desibfcom new

Despite the ubiquity of jeans and t-shirts in cities, traditional wear remains the gold standard for festivals and ceremonies. To understand the value of the update, let's

To succeed in this niche, you must move beyond the monolithic idea of "Indian culture." Content must be tailored to the specific "India" you are addressing. To succeed in this niche, you must move

The Privacy Policy notes that the site records IP addresses and browser information even for non-registered users. A Note on Branding Ambiguity

Most parts of the website, such as searching and viewing thumbnails, do not require an account. However, registration is needed for features like saving favorites or uploading content. Understanding the Security Risks

: Explain how to set up a profile that fits the community culture, including choosing a username, avatar, and bio. 2. Navigating the Interface

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.