Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers probably authenticated to cause a denial of service and execute arbitrary code as demonstrated by vd_proftpd.pm a \ProFTPD remote exploit.\