Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".Referenceshttp://marc.info/?l=bugtraq&m=100698397818175&w=2
