| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Half His Age A Teenage Tragedy 2017 Webdl Sp Free 'link' Jun 2026On IMDb, the mini‑series holds a rating of based on user votes, while the French version of IMDb shows a 6.4/10 . These are relatively strong ratings for an adult drama. The Cinematic Breakdown of Half His Age: A Teenage Tragedy (2017) half his age a teenage tragedy 2017 webdl sp free The series is split into three distinct chapters that track the moral erosion of its main character: On IMDb, the mini‑series holds a rating of – The narrative culminates in a remote cabin where Davies is trapped in a coercive, twisted arrangement with the two girls, while his wife searches for him, leading to a grim conclusion. Critical Reception and Production Value Critical Reception and Production Value – Establishes the – Establishes the relationship between Mr. Davies and Lola, and the initial discovery of their secret by Heather. Part 2: The Threat While the search term includes "free," it's always best to consider the legal and ethical ways to watch the film. Since it's an adult title, your options might be more limited than for a mainstream movie, but they do exist. The predatory high school teacher whose life completely unravels. Jill Kassidy
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |