Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5175. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in AceFTP Freeware 3.80.3 by sending a malformed LIST command to write arbitrary files outside the intended directory. The PoC leverages insufficient input sanitization to traverse directories and create a file named 'testfile.txt' in the root directory.
Description
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in AceFTP Freeware 3.80.3 by sending a malformed LIST command to write arbitrary files outside the intended directory. The PoC leverages insufficient input sanitization to traverse directories and create a file named 'testfile.txt' in the root directory.