This is a small and nasty one: http://www.cvedetails.com/cve/CVE-2014-4877/
The flaw is triggered when wget receives a directory listing that includes a symlink followed by a directory with the same name. The output of the LIST command would look like the following, which is not possible on a...