Gentoo Linux Security Advisory GLSA 200611-05:02 – The original fix for Netkit FTP server introduced a new vulnerability allowing the listing of any arbitrary directory with root group permissions due to a typo in the setgid() call. New fixed packages are available. Also, this update adds a second CVE reference which was not originally mentioned while it was covered by the original fix. Versions less than 0.17-r5 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/54411/glsa-200611-05-02.txt
Source: https://packetstormsecurity.com/files/54411/Gentoo-Linux-Security-Advisory-200611-5.html