| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. 123 Movierulzme Free ((better))He understood, finally, what the warning in the old man’s eyes had been trying to teach him. The films were not benign restorations but trades made in the dark. Every time the projector returned a memory, it set a ledger’s balance: something it could not bear would be due. Some users have reported facing legal action for downloading or streaming content from these sites. While the likelihood varies by country and the specifics of the case, the risk is real. 123 movierulzme free If you are trying to navigate this landscape, it is essential to understand what these platforms are, the risks involved, and how to stay safe while streaming. Understanding the "123 Movierulzme" Hybrid He understood, finally, what the warning in the After some research, Rahul discovered a few affordable streaming services that offered a wide range of movies and TV shows. He decided to subscribe to one of them and was thrilled to find that his favorite movie was available to stream. Some users have reported facing legal action for The search term "123 movierulzme free" refers to a specific segment of online piracy websites. These platforms operate illegally by distributing copyrighted motion pictures and television shows without authorization. This report analyzes the nature of these websites, their operational methods, the legal implications of using them, and the significant security risks they pose to end-users. . These platforms provide free access to movies and TV shows but carry significant security and legal risks. Quick User Guide
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |