Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7147
http://www.securityfocus.com/bid/3351