Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
https://exchange.xforce.ibmcloud.com/vulnerabilities/3543
http://www.securityfocus.com/bid/818