CVE: 2013-2512 ftpd shell injection (closes #26)