CVE-2009-4053
FTP server allows creation of arbitrary directories using ".." in the MKD command.
CVE-2009-0244
FTP service for a Bluetooth device allows listing of directories, and creation or reading of files using ".." sequences.