Macros in War FTP 1.70 and 1.67b2 allow local or remote malicious users to read arbitrary files or execute commands.
jgaa warftpd 1.70b
jgaa warftpd