oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) characters.Referenceshttp://securitytracker.com/id?1014413
