A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Re Volt-drmfree 〈AUTHENTIC ◆〉

The phrase typically appears in lists of game downloads on sites like OceanofGames , referring to a version of the classic radio-controlled car racing game, Re-Volt , that has had its Digital Rights Management (DRM) removed. Understanding Re-Volt (DRM-Free)

: A "DRM-FREE" version means the game can be installed and played without needing persistent online authentication, specific launchers, or hardware-based checks. This is common for older "abandonware" titles or games sold on platforms like GOG.com , which specializes in DRM-free releases. Re Volt-DRMFREE

: Re-Volt is a 1999 racing title where players control RC cars through varied environments like supermarkets, museums, and toy shops. The phrase typically appears in lists of game

: Because the original source code was leaked and then officially licensed to fans, the game lives on through the RVGL (Re-Volt Go Local) project. This community-maintained version acts as a modern, DRM-free engine that supports wide screens, high resolutions, and online multiplayer. Ocean of . com : Re-Volt is a 1999 racing title where

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.