A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Robbery Of The Mummies Of Guanajuato Top Instant

The mummies were never seen again, and the legend of the Great Mummy Heist lived on. Some say that on certain nights, when the moon is full and the wind blows through the streets of Guanajuato, you can still hear the whispers of El Catrín, La Llorona, and El Chupacabra, laughing and celebrating their daring robbery.

In the late 19th century, Guanajuato, a colonial city in central Mexico, was known for its rich history, stunning architecture, and...mummies. Yes, you read that right. For decades, Guanajuato had been home to a fascinating attraction: a collection of naturally mummified bodies, exhumed from the local cemetery. These weren't just any mummies, but the well-preserved remains of people who had lived in the city centuries ago. robbery of the mummies of guanajuato top

Others claim that if you visit the Museo de las Momias today, you might catch a glimpse of La Reina de las Momias, now said to be hidden in a secret location, watching over her fellow mummies with an enigmatic smile. The truth, much like the mummies themselves, remains shrouded in mystery. The mummies were never seen again, and the

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.