FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive letter as demonstrated using \//A:\. NOTE: this has been reported as a buffer overflow by some sources but there is not a long argument.