Typsoft FTP Server 1.11 with \Sub Directory Include\ enabled allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected.