by Tan Chew Keong
Release Date: 2008-06-27
[en] [jp]
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.
An example of such a response from a malicious FTP server is shown below.
Response to LIST (forward-slash):
-rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n
By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below.
480p Dilwale Dulhania Le Jayenge 1995 Bluray Hi... 【TOP – Series】
One of the key factors that contributed to the film’s enduring success is its memorable soundtrack, composed by Jatin-Lalit, with lyrics by Anand Bakshi and Aditya Chopra. The songs, such as “Tujhe Dekha To”, “Mehndi Laga Ke Rakhna”, and “Ja Simran Ja”, have become an integral part of Indian popular culture, with many considering them among the greatest Bollywood songs of all time.
Dilwale Dulhania Le Jayenge, released in 1995, is one of the most iconic and beloved Bollywood films of all time. Directed by Aditya Chopra and produced by Yash Chopra, this romantic drama has become a cultural phenomenon, captivating audiences with its engaging storyline, memorable characters, and timeless music. The film stars Shah Rukh Khan and Kajol in the lead roles, and its impact on Indian cinema is still felt today. 480p Dilwale Dulhania le Jayenge 1995 BluRay Hi...
Over the years, Dilwale Dulhania Le Jayenge has been released in various formats, allowing fans to enjoy the film in different ways. For those looking to download or stream the movie, a 480p BluRay version in Hindi is now available. This format offers a great balance between video quality and file size, making it an ideal option for those with slower internet connections or limited storage space. One of the key factors that contributed to
The movie’s narrative revolves around Raj Malhotra (Shah Rukh Khan), a charming and romantic young man who falls in love with Simran Singh (Kajol), a beautiful and free-spirited woman, while on a trip to Europe. As they navigate their feelings for each other, they must confront the challenges of their families’ disapproval and the complexities of their own relationships. Directed by Aditya Chopra and produced by Yash
Dilwale Dulhania Le Jayenge 1995: A Timeless Bollywood Classic Now Available in 480p BluRay Hindi**
For those interested in downloading or streaming Dilwale Dulhania Le Jayenge 1995 in 480p BluRay Hindi, several options are available. Some popular platforms and websites offer the movie for free or with a subscription. However, it is essential to ensure that you are accessing the content from a legitimate source to avoid any copyright or piracy issues.
Patch / Workaround
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.