This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.
An example of such a response from a malicious FTP server is shown below.
Response to LIST (forward-slash):
-rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n
By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
Cambridge Igcse And O Level Business Studies Coursebook Online
She had learned that business isn’t just about money. It’s about decisions, people, and consequences. And that one well-designed book—the —had been her patient, rigorous, and friendly guide.
By the middle of the term, the book became her companion. The were bolded in the text and listed at the end of each chapter—words like profit, liquidity, economies of scale, niche market . She made flashcards from them. The summary checklist at the end of each chapter helped her test herself.
When she sat for Paper 1, she smiled. The question about a clothing company’s cash flow problem? She had practised that exact type from the coursebook’s . The 6-mark question about whether to open a second branch? She used the evaluation phrase she learned from the book’s model answers: “On the one hand… however… overall…”
It was the first day of Year 10, and Maya stared at her timetable. Business Studies 0450 . She had no idea what to expect. Her older brother had called it “the subject about money and shops.” Her mother, a small-business owner, had smiled and said, “It’s the subject about how the world actually works.” Cambridge Igcse And O Level Business Studies Coursebook
The first real test came two weeks later. Mr. Arit gave them a case study: a local bakery was losing customers because a new supermarket had opened next door. He asked, “What should the owner do?”
But her favourite part was the from real Cambridge exams. One was about a car manufacturer in Japan. Another was about a coffee chain in Vietnam. She learned that business principles are the same everywhere—but culture and location change the answer.
Then she found the gold: . One question said: “Explain two ways a bakery could change its promotion to compete with a supermarket (4 marks).” Another said: “Do you think lowering the price is always the best strategy? Justify your answer (6 marks).” She had learned that business isn’t just about money
The night before the final IGCSE exam, Maya didn’t panic. She went through the in the introduction of the book. She re-read the command words glossary: state, describe, explain, analyse, evaluate . She knew that “evaluate” meant she had to give a balanced conclusion, with a “why” at the end.
Months later, the results arrived. Maya didn’t just pass. She earned an A*. Her mother framed the certificate and hung it in the bakery.
“This,” Mr. Arit said, “is your map. Don’t just read it. Use it.” By the middle of the term, the book became her companion
And the coursebook? It stayed on Maya’s desk, worn and full of sticky notes. Not because she had to keep studying it. But because, as Mr. Arit had promised, she now saw business everywhere—in the price of a loaf of bread, in the way her mother scheduled staff shifts, in the sign outside a closing shop.
That was the secret. The coursebook didn’t just teach facts. It taught how to answer . The back of the book had a full , showing exactly what a 2-mark, 4-mark, and 6-mark answer looked like. For the first time, Maya understood that “explain” meant “define + apply,” and “analyse” meant “explain the consequence.”
When Maya walked into the classroom, her teacher, Mr. Arit, held up a thick, colourful book. The cover was unmistakable: a white background, bold red and blue lettering, and a photograph of a bustling marketplace. It was the (second edition), by Veenu Jain and Alex Smith.
Maya turned to . The book didn’t just give definitions. It had a real-world example—a small café that competed with a chain by offering free wi-fi and loyalty cards. There was a table comparing product, price, place, and promotion. There were discussion questions in the margin: “Why might price be less important than quality for some customers?”
Avoid downloading files/directories from untrusted FTP servers.
2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.