A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Activation Code: Gcompris

GCompris is a high-quality, open-source educational software suite for children aged 2 to 10. It includes over 150 activities (games, puzzles, drawing, typing, math, reading, etc.). It is free software (GPL license), meaning the source code is free. However, the pre-compiled binary versions on certain platforms (like Windows, macOS, Android, iOS) require an activation code to unlock all activities after a trial. 2. Why Does Free Software Need an Activation Code? This confuses many users. Here’s the breakdown:

| Version | Cost | Activation Required? | |--------|------|----------------------| | (from distro repos) | Free | No | | Self-compile from source | Free | No | | Windows/macOS installer | Free trial (25 activities), then paid | Yes | | Android/iOS app | Free trial (25 activities), then paid | Yes | | Raspberry Pi (official repos) | Free | No | gcompris activation code

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.