vuln.sg  Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague

vuln.sg Vulnerability Research Advisory

AceFTP FTP-Client Directory Traversal Vulnerability

by Tan Chew Keong
Release Date: 2008-06-27

Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague   [en] [jp]

Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague Summary

A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.


Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague Tested Versions


Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague Details

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

An example of such a response from a malicious FTP server is shown below.


Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n
 

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.


Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague POC / Test Code

Please download the POC here and follow the instructions below.

Live 1. Fc Union Berlin Vs Braga - Broadcast 4 Online | 1. Fc Union Berlin Vs Braga - Broadcast 4 Stream | Vipleague May 2026

Despite Braga being reduced to ten men in the 31st minute after a red card for Sikou Niakaté , Union Berlin could only secure a draw. Robin Gosens opened the scoring for Union in the 42nd minute, but Álvaro Djaló equalized for the hosts early in the second half.

The most recent official match between and S.C. Braga took place on November 29, 2023, during the 2023–24 UEFA Champions League group stage. There are currently no upcoming fixtures scheduled between these two clubs for the 2025–26 season. Wed, Nov 29 UEFA Champions League Union Berlin Á. Djaló (51') R. Gosens (42') S. Niakate (31') Recent Match Summaries (2023–24 Champions League) Despite Braga being reduced to ten men in

While the specific "Broadcast 4" link mentioned in your query refers to an unofficial third-party stream, official broadcasts for these clubs are typically found through the following providers: Braga took place on November 29, 2023, during

Union Berlin and Braga were both drawn into Group C for the 2023–24 campaign. Their two encounters were highly competitive: Djaló (51') R

Since 2022, the teams have met four times in European competitions: 2 Union Berlin Wins: 1 Draws: 1 Total Goals: Braga 5, Union Berlin 5 Where to Watch

In a dramatic comeback, Braga overturned a two-goal deficit to win at the Olympiastadion. Sheraldo Becker scored twice to give Union a 2–0 lead, but Braga leveled through Niakaté and a stunning strike from Bruma . André Castro secured the win for the Portuguese side with a 94th-minute goal. Head-to-Head History


Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague Patch / Workaround

Avoid downloading files/directories from untrusted FTP servers.


Live 1. FC Union Berlin vs Braga - Broadcast 4 Online | 1. FC Union Berlin vs Braga - Broadcast 4 Stream | VipLeague Disclosure Timeline

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.


Contact
For further enquries, comments, suggestions or bug reports, simply email them to