A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

3857m065l95-08.rar -

For issues during installation or deployment, please contact the Engineering Support Team with your device's serial number and a log of the current configuration.

Connect to the target device via the designated service port. 3857M065L95-08.rar

Deploy the firmware following the standard upload procedure detailed in the User Manual . For issues during installation or deployment, please contact

This release provides critical updates for the 3857 series hardware, specifically targeting the M065L95 module. Version 08 includes performance optimizations, stability patches, and enhanced compatibility with current network protocols. 2. Key Improvements This release provides critical updates for the 3857

The alphanumeric string 3857M065L95-08.rar refers to a specific compressed file archive, likely a firmware update, technical driver, or data package for specialized industrial or computing equipment. In many contexts, such naming conventions—combining a model series (3857), a specific hardware identifier (M065L95), and a version number (08)—are common for or telecommunications components .

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.