The GNU tar command, when used in FTP sessions, may allow an malicious user to execute arbitrary commands.
university of washington wu-ftpd 2.4.1