A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Stronghold Kingdoms Hall Of Heroes Here

Introduced as a long-term progression system, the Hall of Heroes allows players to unlock permanent stat boosts and unique perks that apply across all parishes, counties, and even worlds (depending on server settings). Here is everything you need to know about this crucial end-game feature. The Hall of Heroes is a meta-progression interface accessible from the main menu. Unlike standard in-game research (which is tied to a specific castle on a specific map), the Hall of Heroes tracks Achievement Points and Renown .

In the vast, competitive world of Stronghold Kingdoms , the difference between a local lord and a global conqueror often comes down to one thing: persistent power . While your castles can be razed and your farms pillaged, one aspect of your profile remains a permanent testament to your progress—the Hall of Heroes . stronghold kingdoms hall of heroes

Even if you lose every siege and every war, your Hall of Heroes progress stays with you. In the brutal world of parliamentary politics and midnight raids, that is the only true victory. Last updated for game version 1.23. Check your server’s specific rules, as some "Classic" worlds may have the Hall of Heroes disabled. Introduced as a long-term progression system, the Hall

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.