Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.
http://www.securityfocus.com/bid/13059
http://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg118978.html
http://www.debian.org/security/2005/dsa-706