This is a write up that discusses exploiting the glibc __tzfile_read integer overflow to buffer overflow and leveraging Vsftpd.
You can download it from the following link: https://packetstormsecurity.com/files/download/107824/exploiting-tzfile.txt
Source: https://packetstormsecurity.com/files/107824/Exploiting-glibc-__tzfile_read-Integer-Overflow-To-Buffer-Overflow-And-Vsftpd.html