| vuln.sg Vulnerability Research Advisory |
by Tan Chew Keong 
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system. The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command. An example of such a response from a malicious FTP server is shown below. Response to LIST (forward-slash): -rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below. Sniper Ghost Warrior Serial Key Is Invalid |link| HereThe "invalid" error can actually mean several different things: Sometimes the "invalid key" error is actually a login or profile bug in disguise. Privilege issues can block the game from validating the key file. Right-click the game shortcut on your desktop. Select . Click the Compatibility tab. Check the box for Run this program as an administrator . Click Apply and then OK . 3. Clear the Registry Cache If you bought a physical copy years ago, it may have been a Steam key. Try redeeming the key directly through the Steam Client ("Games" -> "Activate a Product on Steam"). sniper ghost warrior serial key is invalid Double-click serialnumber and leave it empty (if using offline files) or enter your key. Method 2: GOG Galaxy Synchronization & Reinstall Sometimes the GOG Galaxy client itself is the issue. could help in pinpointing a more precise solution. The game key may be locked to a geographical region different from your account location. The "invalid" error can actually mean several different Wait for the process to finish, restart Steam, and try launching the game. 5. Contact Your Key Retailer or Publisher Support Moreover, using a cracked executable on a legitimate installation often breaks achievements, cloud saves, and future updates. It’s a net loss. of the game are you playing (SGW 1, 2, 3, or Contracts)? Where did you buy the retail key? Select Type the key manually into a Notepad file first, then copy-paste it into the game. This eliminates human error entirely. Some keys are region-locked. A key purchased for the Russian or Asian market may not work with a North American or European version of the game. If you bought a cheap key from a third-party marketplace, this is a likely culprit. Sniper: Ghost Warrior 2 originally used . Microsoft shut down the GFWL marketplace and activation servers in 2014. If you have an old retail DVD copy that relies on GFWL, the key may be perfectly valid, but the server no longer exists to verify it. The developers have previously acknowledged this activation issue. You can email support@cigames.com with your proof of purchase (receipt or photo of the CD key) to request assistance or a new key. Check your purchase receipt or confirmation email to identify the target platform (e.g., Steam, GOG, Epic Games Store, Xbox, or PlayStation). Open the correct launcher program on your PC.
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered. |
| Contact |
| For further enquries, comments, suggestions or bug reports, simply email them to |