Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0810
http://www.securityfocus.com/bid/2972
http://www.securityfocus.com/archive/1/20010630093621.66913.qmail%40web13002.mail.yahoo.com
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html