BSD ftpd Single Byte Buffer Overflow

Summary
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
Solution
upgrade your FTP server. Consider removing directories writable by 'anonymous'.