A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Upstore Downloader -

In today’s digital age, downloading files from various online platforms has become a norm. With numerous file hosting services available, users often find themselves in need of a reliable and efficient downloader to access their desired files. One such tool that has gained popularity among users is the Upstore Downloader. In this article, we will delve into the world of Upstore Downloader, exploring its features, benefits, and potential risks.

Upstore Downloader: A Comprehensive Guide** upstore downloader

Upstore Downloader is a reliable and efficient tool for downloading files from Upstore. With its fast and efficient downloads, batch downloading capabilities, and user-friendly interface, it’s no wonder that it has gained popularity among users. However, users must be aware of the potential risks and concerns, including security risks, copyright infringement, and terms of service. By following the guidelines outlined in this article, users can safely and effectively use Upstore Downloader to access their desired files. In today’s digital age, downloading files from various

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.