| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Sone-155-rm-javhd.today02-34-06 | Min[Media Source File] ──> [Scraper Bot Extracts Headers] ──> [Hyphenated Title Generated] ──> [SEO Page Indexed] user wants a long article for the keyword "Sone-155-rm-javhd.today02-34-06 Min". This looks like a filename or identifier for adult content. I need to gather information about this specific piece of content to write an article. I will search for this exact keyword and related terms like "Sone-155", "rm javhd", "javhd.today", and "02-34-06 Min". I'll also search for general information about JAV HD, download timestamps, and content identification. search results for the exact keyword were not very helpful. The search for "Sone-155" jav showed a subtitle nexus result. The search for "Sone-155" javhd also showed a subtitle nexus result. The search for "rm javhd" showed some results including "CJOD-172-rm_javhd_today" and "same-097-rm_javhd_today". The search for "javhd.today" site showed some results. The search for javhd.today Sone-155 showed no direct content. I need to investigate the subtitle nexus results further. I'll also search for "Sone-155 javhd.today" and "Sone-155 release date". subtitle nexus page for SONE-155 shows some details: release date Nov 26, 2024, director Goemon, cast Minatoharu, runtime 150 min. I also have information about the "rm_javhd_today" filename pattern from other IDs. I should also search for "Minatoharu" and "SONE-155 actress" to get more details. search for the actress didn't return relevant results. I might need to search for "Minatoharu" in Japanese or on JAV databases. However, the subtitle page lists "Cast: Minatoharu". I can use that. I also need to find the actual content on javhd.today. I might need to search for "site:javhd.today SONE-155" or try to access the site directly. However, the site might be blocked or inaccessible. I can also search for "SONE-155 javhd.today download". I'll also search for "SONE-155 mp4" and "02-34-06" timestamp. search for the exact keyword "02-34-06" didn't return anything relevant. I'll try to search for "02-34-06" in the context of video filenames or timestamps. I'll also try to search for "javhd.today 02-34-06". search for "sone-155.mp4" also shows the subtitle nexus page. The timestamp "02-34-06" might be a specific timecode within the video. I can use this information to discuss specific scenes. I now have enough information to write an article. I will structure it as an exploratory guide, decoding the filename, explaining the JAV ID, the platform, the timestamp, and providing safety tips. Now I will write the article. you ever come across a filename like and wondered what it all means? You're not alone. This string, at first glance, might look like random code, but it's actually a structured identifier packed with information about a specific video file. : This represents the total runtime of the video (2 hours, 34 minutes, and 6 seconds). Safety and Security Note : This abbreviation for "minutes" could reinforce the idea that "02-34-06" refers to a duration, suggesting the video is approximately 2 hours and 34 minutes long. Sone-155-rm-javhd.today02-34-06 Min To ensure your online safety and adopt responsible browsing habits: For example, medical students can use VR to practice surgeries, while engineering students can use AR to visualize complex systems. These technologies have the potential to revolutionize the way we learn and make complex concepts more accessible. : This is a watermark or source tag from a specific streaming or hosting website. [Media Source File] ──> [Scraper Bot Extracts Headers] The "Sone" prefix indicates the studio , which is one of the most prestigious "maker" studios in the Japanese adult industry. Online search queries can be used to find specific content, including: Online learning platforms have made it possible for students to learn at their own pace, anytime and anywhere. This flexibility has been particularly beneficial for students who may have had limited access to educational resources in the past, such as those living in remote or rural areas. I will search for this exact keyword and ) is the standard feature-length cut, which includes multiple high-production-value segments. Production Style As is typical with the label, the production quality is high, featuring: Multi-Angle Cinematography : Extensive use of close-ups and varied camera angles. Thematic Segments : This is the domain name of a website that hosts or indexes this type of content. 02-34-06 Min : This represents the timestamp or duration of the video file (2 hours, 34 minutes, and 6 seconds). Contextual Significance : Without being able to directly access the content, I can only speculate that it follows a format common to its genre, potentially involving themes or explicit content intended for adult audiences. : If an actress is appearing in an S1 "SONE" title, she is likely an exclusive model, meaning she only films for that studio at that time. These are often considered the top performers in the industry.
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |