Debian Security Advisory DSA 510-1 – jaguar discovered a format string vulnerability in jftpgw, an FTP proxy program, whereby a remote user could potentially cause arbitrary code to be executed with the privileges of the jftpgw server process, which runs as user nobody by default.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33454/dsa-510.txt
Source: https://packetstormsecurity.com/files/33454/dsa-510.txt.html