| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Blackadder Gisella Moretti The Holle 40 -Given the lack of information on a specific connection between these terms, it’s possible that this article is an exercise in creative writing rather than a factual report. For mathematical equations or formulas that might have been part of an initial query I can format like this: $ \(x+5=10\) $. blackadder gisella moretti the holle 40 One of the key cast members of “Blackadder” is Rowan Atkinson, who played the titular character. However, I couldn’t find any information on a person named Gisella Moretti being associated with the show. Given the lack of information on a specific Gisella Moretti is a name that doesn’t seem to be widely recognized in popular culture. It’s possible that Gisella Moretti is a private individual or a relatively unknown figure. However, I couldn’t find any information on a If you could provide more context or clarify what you’re looking for, I’d be happy to try and assist you further. The popular British sitcom “Blackadder” has been a staple of television comedy for decades. The show, which originally aired from 1983 to 1989, follows the misadventures of the Blackadder family through different periods of history. The show’s clever writing, witty humor, and talented cast have made it a beloved favorite among audiences. I’m happy to provide a comprehensive article on the topic. However, I need to clarify that I couldn’t find any information on a specific connection between “Blackadder,” “Gisella Moretti,” and “The Holle 40.” It’s possible that this is a very niche or obscure topic.That being said, here’s an article that provides some general information on each of these terms:
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |