Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the \Restrict to home directory\ option enabled allows local users to escape the home directory via a \/../\ string a variation of the .. (dot dot) attack.