Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
https://exchange.xforce.ibmcloud.com/vulnerabilities/85922
http://www.securityfocus.com/bid/61403
http://secunia.com/advisories/54188
http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html