A vulnerability was discovered in fsp, client utilities for File Service Protocol (FSP), whereby a remote user could both
escape from the FSP root directory (CAN-2003-1022), and also overflow
a fixed-length buffer to execute arbitrary code (CAN-2004-0011)
For the current stable distribution (woody) this problem has been
fixed in version 281b3-3 ...