Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
http://www.securityfocus.com/bid/1560
http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.html