Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denial of service (crash) via long (1) dir (2) ls (3) delete (4) mkdir (5) DELE (6) RMD or (7) MKD commands.