by Tan Chew Keong
Release Date: 2008-06-27
[en] [jp]
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.
An example of such a response from a malicious FTP server is shown below.
Response to LIST (forward-slash):
-rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n
By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below.
Taylor Steele Scoreland Grand Bahama High Quality Online
Taylor Steele's passion for surfboard design stems from his love for the ocean and his extensive experience as a professional surfer. With a keen eye for detail and a deep understanding of what makes a surfboard perform well, Steele has established himself as a leading designer in the industry. His approach to design is centered around creating boards that not only look amazing but also provide an exceptional surfing experience.
Taylor Steele is a renowned artist known for his exceptional skill in creating stunning, high-quality surfboards that not only perform exceptionally well but also boast breathtaking designs. Among his impressive collection, the Scoreland Grand Bahama stands out as a masterpiece that embodies the perfect blend of style, functionality, and craftsmanship. In this article, we'll delve into the world of Taylor Steele's Scoreland Grand Bahama, exploring its features, design, and what makes it a highly sought-after surfboard among enthusiasts. taylor steele scoreland grand bahama high quality
The Taylor Steele Scoreland Grand Bahama is a masterpiece that embodies the perfect blend of style, functionality, and craftsmanship. With its exceptional performance, stunning design, and high-quality construction, this surfboard is a must-have for any serious surfer. Whether you're a seasoned pro or just starting out, the Scoreland Grand Bahama is sure to deliver an unforgettable surfing experience. If you're looking for a surfboard that will take your riding to the next level, look no further than the Taylor Steele Scoreland Grand Bahama. Taylor Steele's passion for surfboard design stems from
The Scoreland Grand Bahama is a flagship model in Taylor Steele's collection, named after the picturesque Grand Bahama Island. This board is a testament to Steele's commitment to creating high-quality surfboards that combine style, performance, and durability. The Scoreland Grand Bahama is designed to excel in a variety of conditions, from gentle waves to more challenging surf. Taylor Steele is a renowned artist known for
One of the standout features of the Scoreland Grand Bahama is its unique color scheme, which reflects the vibrant hues of the Grand Bahama Island. The board's high-quality finish is meticulously applied to ensure a flawless, glossy appearance that not only looks amazing but also provides durability and protection.
The Scoreland Grand Bahama boasts a stunning design that showcases Taylor Steele's artistic flair. The board features a sleek, rounded nose and a pinched, squared-off tail that provides exceptional hold and control. The Scoreland Grand Bahama's outline is characterized by a slightly pulled-in nose and a subtle curve throughout the board, allowing for smooth, fluid turns.
Patch / Workaround
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.