A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Doxology [hallelujah] Feat. Tasha | Cobbs Leonard | David & Nicole Binion (official Live Video)

The lyrics "There's a breaking in my favor, there's a shifting in my direction" transform the hymn from a song of general praise into a personal declaration of spiritual breakthrough.

The live rendition of by David & Nicole Binion featuring Tasha Cobbs Leonard is a cornerstone of the album Dwell: A Live Worship Experience . It reimagines a centuries-old hymn by blending traditional liturgical structure with modern prophetic worship. 1. The Heritage of the Lyrics The lyrics "There's a breaking in my favor,

The term "Hallelujah" is a Hebrew compound meaning "joyous praise in song to God". In this version, it serves as a transitional chorus that builds into a spontaneous, high-energy declaration. 2. A Prophetic Shift The lyrics "There's a breaking in my favor,

Unlike traditional versions of the Doxology, this performance introduces a "prophetic bridge" led by Tasha Cobbs Leonard : The lyrics "There's a breaking in my favor,

The song’s core is built on the Thomas Ken Doxology , a verse written in 1674 as the final stanza of a morning hymn.

The official live video captures a moment where the formal song structure gives way to "flow," a style of worship where the singers improvise based on the atmosphere of the room.

David & Nicole Binion – Doxology (Hallelujah) [Live] Lyrics

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.