Multiple buffer overflows in freeFTPd 1.0.8 without logging enabled allow remote authenticated attackers to cause a denial of service (application crash) and possibly execute arbitrary code via long (1) MKD and (2) DELE commands.