Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via \%s\ or \%n\ sequences in (1) the username during login or other FTP commands such as (2) dir.