source: https://www.securityfocus.com/bid/7749/info

It has been reported that Baby FTP Server does not properly handle some types of requests. This may make it possible for a remote user to gain access to resources outside of the FTP root directory. 

CWD ...
CWD /...
CWD /......
CWD \...
CWD ...CWD .../