CVE-2003-1416

BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service CPU consumption via a long 1 ls or 2 cwd command...

CVE-2003-1380: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to 1 list directories above the root via an 'ls @../' command, or 2 list files above the root via a "mget @../FILE" command...