A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Sinan Akг§д±l Durum Г‡ok ✦

An acoustic version featuring Enes Yolcu was released shortly after the original.

The lyrics of "Durum Çok Acil" (which translates to "The Situation is Very Urgent") explore themes of , unconditional love , and the urgency of reconciliation . Sinan AkГ§Д±l Durum Г‡ok

Initially released on January 21, 2022, as part of the Piyanist 2 album. Composition: Written and composed by Sinan Akçıl . Arrangement: Produced and arranged by Mustafa Ceceli . Mixing & Mastering: Handled by Koray Püskül. An acoustic version featuring Enes Yolcu was released

The song is a mid-tempo Turkish pop ballad characterized by its emotional depth and collaborative vocal performance. Composition: Written and composed by Sinan Akçıl

The narrators describe a state of physical and emotional exhaustion caused by the absence of a loved one ("My weakness is not from tiredness... it's from your absence").

In addition to the original version found on Spotify and Apple Music , several other versions were released to cater to different audiences:

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.