| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. O Cd Ss Olivia Blue Random 01 Jpg Full !!top!! -In large-scale database systems, single-letter prefixes often dictate the root directory or the global asset class. Archive_Diver_99 Date: October 24, 2023 When sequencing files, always use leading zeros (e.g., 01 , 02 instead of 1 , 2 ). This ensures that file 10 does not accidentally sort ahead of file 2 in alphanumeric systems. The keyword also includes the color "blue," which is a powerful addition to the concept of Olivia. In Western culture, blue is strongly associated with feelings of sadness, melancholy, and low mood. For many with OCD, the compulsive rituals and intrusive thoughts are not just annoying; they are emotionally draining and can lead to significant depression, creating a "blue" fog over daily life. o cd ss olivia blue random 01 jpg full If you’re a photographer looking for inspiration, remember that the magic often hides in the unplanned. Turn the “random” into your secret weapon and watch your images come alive. : Sites referencing this string often include menus for Artwork , Card Pools , and Element Settings , suggesting it may be a resource within a game or a digital collection platform. These often represent project codes, user IDs, or directory classifications (e.g., "Original," "Content," "Sub-folder"). The keyword also includes the color "blue," which : Specifies that the image is the maximum resolution or full-length version, rather than a thumbnail, preview, or cropped crop. The "Olivia Blue" and "random 01 jpg" segments likely refer to the visual branding of the advocacy project. Color as Comfort Given these components, several theories have emerged: If you’re a photographer looking for inspiration, remember : Commonly represents "Content Delivery," "Compact Disc" archive sources, or a regional project code identifier. : An academic or technical "paper" describing algorithmic generation of "random" art or card elements, though no specific published academic paper with this exact title was found in recent scientific databases. This defines the secondary classification layer. It organizes the file into a specific subset, preventing data collision when millions of files share similar names. 3. Content Identifiers ( olivia , blue )
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |