ftp & cgi.script security roundup

hi all, probably newbie-stuff to most, but who knows of a reference giving the points to watch in using these two services, including "internal bugs" . i read the announcement about suse not having the wuftp-bug, but still... thanks for any advice or referral. dan :-]