Debian Security Advisory DSA 1006-1 – “kcope” discovered that the wzdftpd FTP server lacks input sanitising for the SITE command, which may lead to the execution of arbitrary shell commands.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44787/dsa-1006-1.txt
Source: https://packetstormsecurity.com/files/44787/Debian-Linux-Security-Advisory-1006-1.html