| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Discografia Completa De Chuy Lizarraga Exclusive [new]Álbum que reafirmó su éxito romántico, con baladas de banda sinaloense que llegaron a los primeros lugares de popularidad. La calidad musical de Chuy Lizárraga no ha pasado desapercibida para la industria. Ha sido nominado en múltiples ocasiones a los prestigiosos premios y Premios de la Radio , incluyendo una nominación en 2014 para la categoría de "Artista Masculino del Año" de Música Regional Mexicana. En 2015, fue homenajeado con una estrella en el famoso Paseo de las Estrellas de Mazatlán , un reconocimiento a su exitosa trayectoria y su aporte a la cultura musical de Sinaloa. Su impacto cultural es tal que ha logrado mantener viva la tradición de la banda sinaloense, apelando tanto a los jóvenes como a los más veteranos, con letras que hablan de la vida cotidiana, el amor y, por supuesto, la fiesta. In recent years, Lizárraga has focused on honoring the legends who inspired him while maintaining his presence on modern charts. Chuy Lizárraga y Su Banda Tierra Sinaloense Essentials discografia completa de chuy lizarraga exclusive Chuy Lizárraga es una de las voces más potentes y respetadas de la música sinaloense. Con su característico estilo alegre, parrandero y romántico, ha consolidado una carrera impecable como solista tras su exitoso paso por agrupaciones emblemáticas como La Arrolladora Banda El Limón y Banda San José de Mesillas. Este trabajo discográfico mostró una evolución en la producción musical. De aquí se desprenden temas inolvidables como "Como Totopo" , un tema con el toque de humor pícaro que tanto caracteriza al sinaloense. Álbum que reafirmó su éxito romántico, con baladas Chuy Lizárraga , often called "La Cara Alegre de la Banda," has built an extensive discography since launching his solo career in 2004 . His work is deeply rooted in the genre, known for its energetic brass and passionate vocals. Core Studio Albums In summary, the search for “Discografía Completa de Chuy Lizárraga Exclusive” is a search for a phantom album. The artist’s true complete discography consists of his studio albums, live recordings, and official compilations, none of which bear that title. The “exclusive” descriptor is most likely a streaming service label for a comprehensive playlist. For fans wishing to own or listen to his entire body of work, the only authentic path is to collect his 20+ official studio albums—each one a testament to his legacy in banda music. Understanding this distinction helps listeners respect the artist’s official output while navigating the sometimes misleading world of digital music curation. En 2015, fue homenajeado con una estrella en If you saw a file or link with that exact title, it is almost certainly a fan-made compilation or a misnamed digital folder . To access his complete official work, search for Chuy Lizárraga on your preferred platform and look for his studio albums listed under his artist profile. 3. Discografía Reciente y Proyectos Especiales (2016-Presente)
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |