Unfiltered shell characters on ftpfile external program invocation.
vulners.com/securityvulns/securityvulns:doc:7562