ftp and html through firewall

[rebowes @ tasc . com (Bob Bowes)]

I'm trying to provide feedback to management that allowing direct ftp
and http (ports 20, 21, & 80) access to an internal machine is bad.
They want concrete evidence that it's bad, not just a bad idea.  I know
there are some ftp and html vulnerabilities, but I don't have any in
front of me right now.  If you know of some, please let me know.

BTW, my recommendation of putting the server outside an application
level firewall was rejected.  I would still like to prove my case.

Bob