One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5776
http://www.openbsd.org/advisories/ftpd_replydirname.txt
http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html