| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Adobe Acrobat Pro Dc 201901020098 Crack Mac Os NowAdobe Acrobat PRO DC 2019 is a powerful tool for creating, editing, and managing PDF documents. As a Mac OS user, you're likely looking for a reliable and feature-rich solution to handle your PDF needs. In this article, we'll explore the key features and benefits of Adobe Acrobat PRO DC 2019, as well as provide guidance on how to use it on your Mac. Adobe Acrobat PRO DC 2019 is a powerful and feature-rich tool for creating, editing, and managing PDF documents on Mac OS. With its advanced security features, collaboration tools, and seamless integration with other Adobe apps, it's an essential tool for professionals and individuals alike. By following the guidelines outlined in this article, you can ensure a smooth and successful experience with Adobe Acrobat PRO DC 2019 on your Mac. Adobe Acrobat PRO DC 201901020098 Crack Mac OS We do not condone or promote the use of cracked software or unauthorized serial keys. Using cracked software can pose security risks, compromise your data, and violate Adobe's terms of service. Adobe Acrobat PRO DC 2019 is a powerful
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |