CVE-2003-1380: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to 1 list directories above the root via an 'ls @../' command, or 2 list files above the root via a "mget @../FILE" command...