No patches have been made available. The bug was reproducible only on a libc5 Linux system. The Linux glibc version of NcFTPd 2.3.4 ftp server is NOT vulnerable. The bug does not appear to be present in the latest version, NcFTPd 2.3.5. Affected users may upgrade free of charge to the latest version.
All versions ARE vulnerable.
OpenServer Versions 5.0.5 and earlier IS vulnerable. 4.3.x ARE NOT vulnerable. HPUX Versions 10.x and 11.x ARE NOT vulnerable. HP is continuing their investigation. All versions ARE NOT vulnerable.