| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Old Actress Jayamalini Nude Images Peperonity Com Exclusive Free Direct: She is the younger sister of Jyothi Lakshmi , another legendary cabaret queen of South Indian films. Signature Look: High-neck polyester kurtas + bouffant hair old actress jayamalini nude images peperonity com exclusive Jayamalini, a legendary figure in South Indian cinema, was particularly renowned for her glamorous on-screen persona and vibrant costumes that defined the 1970s and 80s. Her fashion gallery reflects a mix of bold cabaret outfits and traditional ethnic wear, often paired with statement jewelry. : She is the younger sister of Jyothi Before the age of social media influencers, there was Jayamalini—a dancer, an actress, and a fashion icon who wore clothes that most wouldn't dare to. This article serves as your ultimate visual and stylistic guide to the wardrobe of one of South Indian cinema’s most iconic cabaret dancers. Before the age of social media influencers, there "Style," she said, adjusting her spectacles, "is not about covering up. It is about revealing what you choose to reveal. I took the saree, our most traditional garment, and I made it dangerous. I wore it six inches lower on the hip. I wore it with boots. I wore it with a leather jacket in one film. The directors were terrified. The audiences were thrilled."
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |