| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Bangbus Violet Voss Roses Are Red Violets A Top -Over time, the phrase evolved and was adapted into various forms, often used to express sentimental feelings or to create lighthearted, humorous verses. The Bangbus Violet Voss meme can be seen as a manifestation of internet culture's affinity for absurdity, playfulness, and self-expression. The meme's use of the phrase "Roses are red, Violets are a top" subverts traditional notions of romantic poetry, replacing sentimental language with a lighthearted, humorous twist. The Bangbus Violet Voss character embodies this playfulness, representing a carefree and accepting attitude towards identity, love, and relationships. Violets have long been associated with modesty, humility, and loyalty. In the language of flowers, violets are often seen as a symbol of love, fertility, and creativity. In many cultures, violets are also linked to the heart chakra, representing emotional balance and well-being. The connection between violets and these symbolic meanings has contributed to their enduring popularity in literature, art, and popular culture. bangbus violet voss roses are red violets a top The phrase "Roses are red, Violets are blue" has its roots in 15th-century England, where it was used as a poetic device to express love and admiration. The original poem, "Roses Are Red, Violets Are Blue," was written by Edmund Spenser in 1590 and read: This paper explores the intersection of language, culture, and internet memes through the lens of the phrase "Roses are red, Violets are blue" and its connection to the Bangbus Violet Voss. We examine the historical context and evolution of this poetic phrase, its association with violets as a symbolic flower, and the emergence of a meme that has captivated online communities. By analyzing the Bangbus Violet Voss phenomenon, we shed light on the dynamics of internet culture, the power of language, and the ways in which memes can both reflect and shape societal values. Over time, the phrase evolved and was adapted The Bangbus Violet Voss meme emerged on social media platforms in the mid-2010s. The phrase "Roses are red, Violets are a top" became a rallying cry for online communities, often used to express solidarity, support, or playful teasing. The Bangbus Violet Voss, a cartoon character created by artist and writer Emily Voss, became the face of this meme. The character's androgynous appearance, bright colors, and cheeky demeanor resonated with online audiences, who began to create and share memes featuring the Bangbus Violet Voss. "The rose is red, the violet blew, And all the world is full of loue." The Bangbus Violet Voss character embodies this playfulness, The phrase "Roses are red, Violets are blue" has been a staple of poetry and popular culture for centuries. This seemingly innocuous expression has been used to convey love, friendship, and even humor. However, in recent years, a new iteration of this phrase has taken the internet by storm: "Roses are red, Violets are a top." This meme, often associated with the Bangbus Violet Voss, has become a cultural phenomenon, sparking both amusement and confusion. In this paper, we delve into the history and significance of this phrase, its connection to violets as a symbolic flower, and the emergence of the Bangbus Violet Voss meme.
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |