| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. 2024 Hindi S01 E03 Bull Original H !free! | Dubai BhaujiThe cinematography for the series was handled by , with art direction by Nihal Khan . Episode 03 Details * Stars. Manvi Chugh. Ashish Chaudhary. Rohit Verma. ... * Stars. Manvi Chugh. Ashish Chaudhary. Rohit Verma. Dubai Bhauji S01E03 - IMDb dubai bhauji 2024 hindi s01 e03 bull original h Episode 3 serves as a significant turning point for the season. According to IMDb listings , it holds a high user rating of based on early viewer reception. The episode concludes the first major arc of the series, focusing on the return of the protagonist's husband and the resolution (or escalation) of her village affairs. Series Release Schedule (Season 1) Release Date Dubai Bhauji Part 1 February 9, 2024 Dubai Bhauji Part 2 February 9, 2024 S01E03 Dubai Bhauji Part 3 February 18, 2024 The cinematography for the series was handled by
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |