A vulnerability has been reported in ALFTP, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the application loading executables (e.g. readme.exe) in an insecure manner. This can be exploited to run an arbitrary program by tricking a user into e.g. opening a file located on a remote WebDAV or SMB share.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in versions 5.30.0.1 and prior.

Solution
Update to version 5.31.

Provided and/or discovered by
JVN credits Fumihiko Sano.

Original Advisory
Altools:
http://www.altools.jp/ETC/NEWS.aspx?mid=231&vidx=141

JVN:
http://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000011.html
http://jvn.jp/en/jp/JVN85695061/index.html

Deep Links
Links available in Customer Area