A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

[s2e13] No Way Out (1) May 2026

The episode features the haunting contrast of Etta James' "At Last" and Deep Purple's "Smoke on the Water". Critical Reception

Fans and critics often cite this as a "must-watch" episode for its psychological depth and Carradine’s terrifyingly understated performance. However, the ending—where Frank is allowed to walk away in exchange for the lives of a busload of kidnapped children—remains one of the most polarizing "cliffhangers" in the series. [S2E13] No Way Out (1)

Frank Breitkopf, played by Keith Carradine, is introduced as perhaps the most prolific serial killer the BAU has ever encountered, with a body count exceeding 100 over 30 years. The episode features the haunting contrast of Etta

Criminal Minds: "No Way Out (1)" In the high-stakes world of , Season 2, Episode 13, titled " No Way Out ", stands as one of the most chilling and unconventional entries in the series' history. Frank Breitkopf, played by Keith Carradine, is introduced

Amy Madigan guest stars as "Crazy Jane," the only woman Frank ever spared because she "forgot to be afraid" of him. Their bizarre connection becomes the leverage Gideon tries to use.

The story is told through flashbacks as Frank and Gideon talk, breaking the show’s traditional formula by identifying the killer from the very first scene. Key Moments & Trivia 🔎

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.