Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner or long responses to the client commands (2) USER (3) PASS (4) ACCT and possibly other commands.