remote command execution in 'tattle'

Hello, a recent bugtraq posting by CISSP C.J. Steele contains a vulnerability which will leave a box possibly open for remote command execution. There are many ways to exploit this, but I chose logging in through ftp with username like sshd rhost 9 10 11 |rm$IFS-rf$IFS/|echo'1.1.1.1' because of...