| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Kaswida Za Kiarabu Audio Download Video 〈Ultimate »〉Kaswida za kiarabu are a treasure trove of spiritual and cultural heritage, offering a glimpse into the rich history and traditions of the Islamic world. With the ease of digital technology, it has become possible to access and download kaswida za kiarabu audio and video files, allowing people to benefit from these timeless works of art. By listening to and reflecting on kaswida za kiarabu, individuals can experience spiritual growth, emotional solace, and a deeper connection to their cultural heritage. Kaswida, a form of Arabic poetry, has been a cornerstone of Islamic culture and tradition for centuries. These poetic verses, often recited or sung, have been a means of expressing spiritual and emotional depth, conveying moral messages, and telling stories of love, faith, and perseverance. With the advent of digital technology, kaswida za kiarabu (Arabic kaswida) have become more accessible than ever, allowing people to download and listen to these timeless works of art in audio and video formats. kaswida za kiarabu audio download video In Islamic culture, kaswida za kiarabu hold a revered position as a means of spiritual expression and guidance. Many famous poets, such as Al-Khansa and Al-Mutanabbi, have contributed to the rich heritage of Arabic poetry. Their works have been studied, recited, and sung for centuries, providing a window into the history, values, and traditions of the Islamic world. Kaswida za kiarabu are a treasure trove of The use of kaswida za kiarabu in Islamic rituals and ceremonies is widespread. For example, during weddings and celebrations, kaswida are often recited or sung to praise the bride, groom, or to express gratitude to Allah. In addition, kaswida za kiarabu are frequently used in educational settings to teach moral values, Arabic language, and literature. Kaswida, a form of Arabic poetry, has been Kaswida za kiarabu, also known as qasida or kasida, are a type of Arabic poem that originated in the pre-Islamic era. These poems typically consist of a series of couplets, with a specific rhyme scheme and meter. They often express themes of love, praise, satire, or spiritual guidance. In the context of Islamic tradition, kaswida za kiarabu frequently focus on faith, morality, and the importance of living a virtuous life.
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |