The remote host is missing an update to the system as announced in the referenced advisory.

Update your system with the appropriate patches or software upgrades. http://www.debian.org/security/2005/dsa-686 http://www.gftp.org/changelog.html http://www.vuxml.org/freebsd/2d8cf857-81ea-11d9-a9e7-0001020eed82.html

The following package is affected: gftp CVE-2005-0372 Directory traversal vulnerability in gftp 2.0.18 and earlier for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.