Secunia

Glenn Stewart has discovered a vulnerability in wu-ftpd, which can be exploited by malicious, authenticated users to circumvent certain restrictions.

A user can reportedly bypass the directory access restrictions imposed by the "restricted-gid" option by changing the permissions on their home directory using chmod. This will cause wu-ftpd to fall back to the root directory on subsequent logins when access to the user's home directory is denied.

Solution
Don't rely solely on the "restricted-gid" option to restrict access.

Provided and/or discovered by
Glenn Stewart

Deep Links
Links available in Customer Area