Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.
http://www.securityfocus.com/bid/2972
http://www.securityfocus.com/archive/1/20010630093621.66913.qmail%40web13002.mail.yahoo.com
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html