| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Xem Phim Perfume The Story Of A Murderer !!hot!!XEM PHIM PERFUME THE STORY OF A MURDERER: A Spooky Account of Craving and Gloom “Perfume: The Story of a Murderer” is a flick that will make you captivated and troubled at the equal moment. Based on the popular tale by Patrick Süskind, the cinema describes the story of Jean-Baptiste Grenouille, a youthful man with an exceptional ability of smell who grows obsessed with seizing the flawless scent. But as his obsession increases, so does his wickedness, leading him down a route of murder and mayhem. The Strange Protagonist The movie is set place in 18th century France, where Jean-Baptiste Grenouille (played by Ben Whishaw) is created with a rare skill - an extraordinarily sharp sense of odor. Abandoned by his mom and left to fend for himself on the avenues of Paris, Grenouille develops up with a intense comprehension of the earth through his faculty of odor. He can identify the slightest nuances in scents, from the stench of rotting garbage to the pleasant aroma of newly roasted food. XEM PHIM PERFUME THE STORY OF A MURDERER: A Spooky Account of Fixation and Shadow “Perfume: The Story of a Murderer” is a flick that will compel you fascinated and troubled at the equal moment. Based on the top-selling tome by Patrick Süskind, the feature tells the chronicle of Jean-Baptiste Grenouille, a blooming individual with an exceptional ability of smell who grows obsessed with trapping the ideal aroma. But as his obsession expands, so does his evil, leading him down a track of slaying and havoc. The Unlikely Protagonist The film takes spot in 18th century France, where Jean-Baptiste Grenouille (played by Ben Whishaw) is created with a unique ability - an extraordinarily sharp sense of scent. Neglected by his parent and left to struggle for himself on the alleys of Paris, Grenouille ages up with a deep grasp of the globe through his feeling of odor. He can spot the subtlest nuances in smells, from the reek of rotting waste to the lovely aroma of freshly baked pastry. xem phim perfume the story of a murderer XEM PHIM PERFUME THE STORY OF A MURDERER: A Haunting Tale of Obsession and Darkness “Perfume: The Story of a Murderer” is a film that will leave you spellbound and unsettled at the equal time. Based on the bestselling story by Patrick Süskind, the film tells the tale of Jean-Baptiste Grenouille, a young man with an exceptional faculty of smell who becomes obsessed with capturing the ideal scent. But as his obsession grows, so does his darkness, leading him along a track of homicide and disorder. The Unlikely Protagonist The film takes setting in 18th century France, where Jean-Baptiste Grenouille (played by Ben Whishaw) is delivered with a uncommon talent - an remarkably keen perception of scent. Abandoned by his mom and left to fend for himself on the streets of Paris, Jean-Baptiste Grenouille grows up with a deep insight of the world by his faculty of odor. He can identify the subtlest variations in aromas, from the foul smell of spoiling garbage to the pleasant aroma of recently baked pastry. XEM PHIM PERFUME THE STORY OF A MURDERER:
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |