by Tan Chew Keong
Release Date: 2008-06-27
[en] [jp]
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.
An example of such a response from a malicious FTP server is shown below.
Response to LIST (forward-slash):
-rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n
By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below.
The Carpenters - Discography -13 Cd- - 1969-2004-: Flac Verified
The Carpenters, one of the most iconic and beloved musical duos of the 20th century, have left an indelible mark on the music industry. With a career spanning over three decades, Karen and Richard Carpenter have captivated audiences with their harmonious vocals, catchy melodies, and eclectic blend of pop, rock, and soft rock. In this blog post, we'll take a journey through their extensive discography, comprising 13 CDs of exceptional music, released between 1969 and 2004, all in high-quality FLAC format.
The Carpenters' music career began in the late 1960s, with their first album, (1969), released on June 12, 1969. Although it didn't chart, the album laid the groundwork for their future success. Their sophomore effort, Uncloseted (1971), was re-released as Carpenters in 1971, featuring the hit single "Mama," which reached No. 24 on the Billboard Hot 100 chart. This marked the beginning of their commercial success. The Carpenters - Discography -13 CD- - 1969-2004- FLAC
The Carpenters' third album, (1971), became a game-changer, yielding two Top 10 hits: "Superstar" and "Close to You." The latter, a cover of the 1963 song by Burt Bacharach and Hal David, earned the duo their first Grammy Award for Best New Artist in 1971. This album's success was followed by Passage (1972), featuring the No. 1 single "Takin' Care of Business" and Now & Then (1973), with the hit single "Yesterday Once More." The Carpenters, one of the most iconic and
The Carpenters' discography is a testament to their enduring legacy and musical versatility. This 13-CD collection, featuring 35 years of their music, is a must-have for fans, collectors, and music enthusiasts. With its high-quality FLAC format, this set provides an immersive listening experience, allowing listeners to appreciate the intricate harmonies, melodic songwriting, and timeless appeal of the Carpenters' music. Whether you're a nostalgic fan or discovering their music for the first time, this comprehensive collection is sure to delight and inspire. The Carpenters' music career began in the late
Patch / Workaround
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.