| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Anna Bell Peaks Doctor Verified May 2026In an attempt to uncover the truth, we embarked on a thorough investigation into Anna Bell Peaks' background, scouring the internet for any mention of her attending medical school or obtaining a doctoral degree. What we found was a mixture of confirming and conflicting information, which only added to the enigma. While it is impossible to know for certain the motivations behind Peaks' online persona, the potential for financial gain, fame, or simple deception cannot be ignored. As consumers of online health information, it is essential that we exercise critical thinking and due diligence when evaluating the credibility of sources, particularly those offering advice that may impact our well-being. anna bell peaks doctor verified Ultimately, it is up to each individual to exercise caution and critical thinking when engaging with online health information. By prioritizing transparency, disclosure, and accountability, we can create a safer and more informed online environment, where credible health experts and enthusiasts can share their knowledge and experiences without perpetuating misinformation. The case of Anna Bell Peaks serves as a reminder that, in the digital age, verifying information and credentials is more important than ever. In an attempt to uncover the truth, we As we navigate the ever-evolving world of online health information, it is crucial that influencers and bloggers like Anna Bell Peaks prioritize transparency and disclosure. By clearly stating their qualifications, credentials, and potential conflicts of interest, online health personalities can build trust with their audiences and foster a more informed dialogue around wellness and disease prevention. As consumers of online health information, it is As our investigation continues to unfold, a pressing concern emerges: if Anna Bell Peaks is not, in fact, a doctor, what implications does this hold for her followers and the broader public? The dissemination of unverified medical advice by an unlicensed individual can have serious consequences, including harm to those who may rely on her guidance for critical health decisions.
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |