A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Zombieland.double.tap.2019.1080p.bluray.x264-dr... | 2024 |

This requires a thorough check of each word against the list of proper nouns. For example, in the first paragraph, "The T-9000 zombies are a game-changer in the world of Zombielander."

First, I need to go through each word and think of three synonyms. But wait, some words are part of the proper nouns like characters' names or the movie title. Those I should leave as they are. The key is to identify which words are proper nouns. Names like Columbus, Wichita, Little Rock, Tallahassee are characters and should remain. The movie titles "Zombieland Double Tap 2019", "Zombieland: Double Tap", and "Zombieland" are proper nouns too. Also, the title "The Story Continues" is part of the structure, but the rest of the words should be handled. Zombieland.Double.Tap.2019.1080p.BluRay.x264-DR...

"Zombieland Double Tap 2019: A Thrilling Sequel to the Zombie Apocalypse" – "Zombieland Double Tap 2019" is a proper noun, so leave as is. "Thrilling" can be replaced with exciting, intense, captivating. "Sequel" could be follow-up, continuation, next installment. "Zombie Apocalypse" – "zombie" can be undead, reanimated corpse, revenant. "Apocalypse" might be cataclysm, end times, doomsday. So the first sentence would be: This requires a thorough check of each word

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.