A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

-18 - Sexy Lady Cristina -2020- Web-dl 720p -sh... Direct

In the vast expanse of the film industry, there exist numerous hidden gems that often go unnoticed by mainstream audiences. These independent films, crafted with passion and dedication, offer unique perspectives and storytelling that can be both captivating and thought-provoking. One such film that has piqued the interest of cinephiles is "-18 - Sexy Lady Cristina -2020- WEB-DL 720p -Sh...," a title that hints at a provocative and intriguing cinematic experience.

Ultimately, the allure of independent cinema lies in its ability to surprise, provoke, and inspire audiences. As viewers, we can appreciate the art of cinematic storytelling and the importance of exploring complex themes and emotions. By doing so, we can gain a deeper understanding of the human experience and the role that film plays in shaping our perceptions and empathy. -18 - Sexy Lady Cristina -2020- WEB-DL 720p -Sh...

Over the years, independent cinema has gained significant traction, with many filmmakers opting to venture out of the traditional studio system. This shift has led to the creation of innovative, boundary-pushing films that cater to diverse tastes and preferences. Independent cinema often focuses on character-driven narratives, exploring complex themes and emotions that resonate with audiences. In the vast expanse of the film industry,

The title "-18 - Sexy Lady Cristina -2020- WEB-DL 720p -Sh..." suggests a film that challenges conventional norms and pushes boundaries. While the specifics of the film's plot and themes are unclear, the title hints at a narrative that explores mature themes and possibly complex female characters. Ultimately, the allure of independent cinema lies in

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.