A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Sophie Teenage Model -

One afternoon, Sophie decided to take a small step toward making her dream a reality. She visited a local community arts center that was hosting a youth career workshop focused on the creative arts and fashion industry. Wearing a vintage jacket she’d found at a thrift shop, she felt a mixture of nerves and excitement as she entered the building.

During a seminar on professional portfolio building, a guest speaker from a reputable creative agency noticed Sophie's keen interest and unique personal style. The speaker encouraged her to consider formal training and to look into professional modeling schools that specialize in helping young people navigate the industry safely and successfully. sophie teenage model

In the heart of the city, sixteen-year-old Sophie spent her days looking at the glossy pages of high-fashion magazines, dreaming of a life far beyond the biscuit factory her father insisted she’d eventually work in. While her friend Jansie was practical and grounded, Sophie was a persistent daydreamer, often losing herself in fantasies of becoming a famous fashion designer or a sophisticated manager. One afternoon, Sophie decided to take a small

As Sophie participated in a mock photo session designed for the workshop, the experience felt transformative. The process of collaborating with a photographer and understanding how to project confidence in front of a camera felt natural to her. Sophie realized that while her environment was rooted in practical, industrial work, her passion for the fashion world was a valid path to explore through education and hard work. Her journey from a dreamer to a professional in training had officially begun, proving that dedication to one's interests can lead to real-world opportunities. During a seminar on professional portfolio building, a

The story could be continued by exploring how Sophie balances her schoolwork with her new hobby, or how she eventually shares her aspirations with her family.

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.