A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Transformice Fur Codes |best| -

"Using Transformice fur codes is

Summary

So in "created by the game’s developers or community members", the term "developers" is a common noun. Replace it with three variants. Similarly, "community members" could be a term to split into three. transformice fur codes

"Code expiration: Some fur codes may expire after a certain period, so make sure to use them before they expire." "Code expiration" → Code Expiry "may expire" → could lapse "make sure to use them before they expire" → ensure their use prior to expiration "Using Transformice fur codes is Summary So in

"customize your character with unique and stylish furs." "Code expiration: Some fur codes may expire after

Wait, but "gaming" in "Happy gaming!" is part of a common phrase used to wish someone, so maybe it's better to keep "gaming" as is. Let me think. The user wants synonyms for each word, so "gaming" can have synonyms. Let's go ahead and do that.

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.