HP-UX ftpd glob() Expansion STAT Buffer Overflow

Summary
Buffer overflow in FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
Solution
upgrade your FTP server Consider removing directories writable by 'anonymous'.