Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.
http://www.securityfocus.com/bid/16535
http://www.debian.org/security/2007/dsa-1245
http://bugs.proftpd.org/show_bug.cgi?id=2658
http://archives.neohapsis.com/archives/dailydave/2006-q1/0122.html