> AFAIK it is along the line wit > > "site exec tar cvzf -rsh-command blafasel host:tar.tgz" Probably something else - I don't believe Red Hat would have that nice old _PATH_EXECPATH bug for so long :-). It might be related to the feature that wu-ftpd can send you a tar of a directory if you do "get directory.tar". Still I'm not sure how it could be exploited though. Elliot? Marek