Faites un tour sur leur serveur. Our test server stopped responding. Below is our findings. This could be used to DoS a remote machine and in some cases execute code remotely.
Lets look at the following example attack.
The server must either have anonymous access rights or an attacker must have an account. FTP Session was initiated from an NT Machine. The following Example was tested on Wondows NT 5.0 beta 2 ftp client, Windows 9x and NT 4.0 ftp clients will not allow you to overflow the buffer from the command prompt, and you will have to code your own NLST command to perform the buffer overflow. 200 PORT command successful. The above example uses 316 characters to overflow.