Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *./../.." command.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0295
http://www.securityfocus.com/bid/2444