There's been a fair amount of discussion on bugtraq about a security 
hole in wu-ftpd.  It's not part of NetBSD, but it is in the package 
collection and it's pretty popular...

		--Steve Bellovin, http://www.research.att.com/~smb
		Full text of "Firewalls" book now at http://www.wilyhacker.com