Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long USER command.