A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

-developedistraction- - Tickle Strip -beta-

Tickle Strip - Beta - is just the beginning. As the platform continues to evolve and improve, you can expect to see even more innovative features and experiences. From virtual reality integrations to AI-powered adaptive difficulty, the possibilities are endless.

When you first log in to Tickle Strip - Beta -, you’ll be greeted by a vibrant and engaging interface that sets the tone for the experience. From there, you can explore a range of interactive games, puzzles, and activities that are designed to challenge and delight. Tickle Strip -Beta- -Developedistraction-

The team behind Tickle Strip - Beta - has spent years studying the science of distraction and its effects on the human brain. By leveraging the latest research in psychology and neuroscience, they’ve created a platform that is tailored to your brain’s unique needs and responses. Tickle Strip - Beta - is just the beginning

In today’s fast-paced world, distractions are everywhere. With the constant ping of notifications, the hum of social media, and the endless stream of information, it’s easy to get caught up in the noise. But what if you could harness the power of distraction to actually improve your day? Enter Tickle Strip - Beta -, a revolutionary new tool designed to provide the ultimate distraction experience. When you first log in to Tickle Strip

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.