Pablo FTP server version 1.77 allows for information disclosure by detecting whether or not a file exists outside of the FTP root directory, allow a remote attack to peruse the system at will.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32525/pablo-ftp.txt
Source: https://packetstormsecurity.com/files/32525/pablo-ftp.txt.html