| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Fsx Imaginesim Vidp New Delhi Indira Gandhi Airport Rip Link Crack Free Best -: Optimized for fluid usage even with high-density AI traffic. For pilots who can't wait, the alternative is . This payware add-on features highly detailed buildings with PBR (Physically Based Rendering) textures, custom ground polygons, and animated jetways, making it a robust and visually stunning modern alternative. : Optimized for fluid usage even with high-density The search for the "best" experience should be built on a solid, secure, and legal foundation. Here is a complete guide to getting the most out of your flight simulator without resorting to risky cracks. The search for the "best" experience should be Searching for "crack-free" or "rip" versions of paid software like ImagineSim VIDP usually leads to sites that host malware, viruses, or phishing scams. These downloads often compromise your computer's security. 🛡️ Safer Ways to Upgrade Your Airport These downloads often compromise your computer's security Despite the size of the airport, it is built to maintain stable frame rates in FSX. Custom Ground Polygons: The visual experience isn't lost at night either. The add-on features , with custom light splashes and illuminated building textures that transform the airport into a glowing hub after dark. : Set Autogen density to "Normal" or "Dense." Setting it to "Very Dense" or "Extremely Dense" outside the airport perimeter can overload the simulator engine in high-density areas like New Delhi. Troubleshooting Common Issues Missing Buildings or Black Textures
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |