Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a LIST command containing a large number of / (slash) * (wildcard) and .. characters.