by Tan Chew Keong
Release Date: 2008-06-27
[en] [jp]
Summary
A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
Tested Versions
Details
This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.
The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.
An example of such a response from a malicious FTP server is shown below.
Response to LIST (forward-slash):
-rw-r--r-- 1 ftp ftp 20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n
By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.
POC / Test Code
Please download the POC here and follow the instructions below.
Pirates Of The Caribbean Dubbing Indonesia Hot- //free\\ -
Guide: Pirates of the Caribbean — Indonesian Dubbing (Hot Topic Overview)
1. Sentuhan Lokal yang Kental (Localization Genius)
Salah satu kelemahan dubbing seringkali adalah hilangnya nuansa asli. Namun, tim pengisi suara Indonesia era itu justru menambah sesuatu. Jack Sparrow di tangan pengisi suara Indonesia terdengar lebih sarkastik, lebih "gemoy", dan dialognya sering diselipi dengan logat Betawi atau Jawa halus yang membuat tokoh anti-hero ini terasa lebih dekat dengan budaya kita. Kalimat "Why the rum is gone?" misalnya, berubah menjadi ekspresi yang terasa seperti keluhan seorang paman yang kecolongan minuman kerasnya—lucu dan relatable.
Conclusion
The hunt for Pirates of the Caribbean with Indonesian dubbing mirrors the films’ own treasure-seeking spirit. Whether for nostalgia, comedy, or accessibility, the demand remains “HOT” because these dubbed versions represent a beloved intersection of global blockbuster storytelling and local Indonesian creativity. Until Disney officially releases an Indonesian dub, fans will continue to sail the high seas of file sharing to find their prized audio track. Pirates Of The Caribbean Dubbing Indonesia HOT-
“Itu kapten, Kapten Jack Sparrow!” — A line best heard in Indonesian. Guide: Pirates of the Caribbean — Indonesian Dubbing
Perbandingan: Subtitle vs Dubbing Indonesia
| Aspek | Subtitle Inggris | Dubbing Indonesia (HOT) |
| :--- | :--- | :--- |
| Koneksi Emosi | Harus membaca teks, terkadang kehilangan ekspresi visual. | Sangat kuat, karena penonton fokus penuh ke gerak-gerik Jack. |
| Humor | Humor verbal Inggris (wordplay) sering hilang dalam terjemahan. | Humor diganti dengan plesetan lokal yang lebih mengocok perut. |
| Aksesibilitas | Butuh kemampuan Bahasa Inggris atau membaca cepat. | Ramah untuk semua kalangan (anak-anak hingga lansia). |
| Nilai Nostalgia | Rendah untuk generasi 90-an. | Sangat Tinggi (trigger indra pendengaran). | Jack Sparrow di tangan pengisi suara Indonesia terdengar
Salah satu adegan yang paling viral di TikTok adalah saat Jack Sparrow berkata, "Kamu tahu masalahmu, Will? Kamu terlalu serius. Hiduplah sedikit, nikmati angin laut..." Versi dubbing Indonesia mengubah kata "angin laut" dengan nada yang begitu santai hingga terasa seperti nasihat kakek-kakek di pinggir pantai.
Patch / Workaround
Avoid downloading files/directories from untrusted FTP servers.
Disclosure Timeline
2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.