A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Labeljoy Full Version 2021

: Includes thousands of layouts matching major manufacturers like Avery and Herma.

Compatible with standard desktop inkjet/laser printers, as well as specialized roll printers like Zebra, Dymo, and Toshiba. A Note on "Cracked" Software and Security Risks Labeljoy Full Version

Labeljoy is built on a lightweight architecture, ensuring smooth performance even on standard office hardware. Minimum Requirement Recommended Specification Windows 7 / 8 / 10 / 11 Windows 10 or 11 (64-bit) Processor 1 GHz Intel/AMD Processor 2 GHz Dual-Core or faster Memory (RAM) 4 GB RAM or higher Disk Space 100 MB free space 500 MB free space (for large asset libraries) Printer Support Any standard Windows printer driver Thermal transfer, laser, or inkjet printer Step-by-Step Workflow: Creating a Data-Driven Barcode Label : Includes thousands of layouts matching major manufacturers

Dynamically link text, barcodes, and images to external databases to ensure labels are always updated with the latest information. Minimum Requirement Recommended Specification Windows 7 / 8

For the vast majority of users, is the perfect "Goldilocks" solution. It isn't overkill like industrial ERP software, and it isn't crippled like free online tools. It strikes a precise balance between power and usability.

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.