CVE-2012-2532 in IIS
Summary
Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.