A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Emerson- Lake Palmer - Tarkus -2016- -flac 24... -

For those who appreciate the nuances of high-quality audio, the 2016 FLAC 24-bit version of Tarkus is a revelation. The clarity of Keith Emerson's Hammond organ and synthesizers is breathtaking, while Greg Lake's vocals are rich and intimate. Carl Palmer's drums and percussion elements are meticulously detailed, providing a solid foundation to the album's complex arrangements. The re-mastered audio allows listeners to pick up on subtle cues and textures that were lost in previous releases, enhancing the overall listening experience.

Tarkus's enduring appeal lies in its visionary approach to music. ELP's fearless experimentation and dedication to their artistic vision have inspired generations of musicians across various genres. The album's themes of environmentalism and the transient nature of life remain relevant today, adding a layer of depth to the listening experience. Emerson- Lake Palmer - Tarkus -2016- -FLAC 24...

The 2016 FLAC 24-bit re-release of Emerson, Lake & Palmer's Tarkus is a must-have for fans of progressive rock and audiophiles. This version offers a definitive way to experience an album that continues to inspire and influence musicians to this day. With its innovative music, conceptual depth, and now, superior sound quality, Tarkus stands as a testament to ELP's legacy and a reminder of the power of progressive rock to transcend time. For those who appreciate the nuances of high-quality

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.