• info
• discussion
• exploit
• solution
• references

Netwin SurgeFTP Server Information Disclosure Vulnerability

(courtesy SDL Office <bugtraq@sentry-labs.com>):

Connect to the server with anonymous and type "nlist ..."