FreeBSD Security Advisory FreeBSD-SA-00:73 - The curl port, versions prior to 7.4.1, allows a client-side exploit through a buffer overflow in the error handling code. A malicious ftp server operator can cause arbitrary code to be executed by the user running the curl client.
46fd9282ad36acaec6a207f12d372b71771bbb5250c4d02f53c4ebeeef664a3f