ftpd on Mac OS X 10.8.3 suffers from a denial of service vulnerability. This appears to be an old vulnerability that has not been properly addressed.
13b77811aa62fba78277a75249e3609cc4a3861977ccbcd966b983a25d221503
FreeBSD version 9.1 suffers from a remote ftpd denial of service vulnerability.
ee47445b28383e3aa5a3bd3988e583b7a429051d6f88bc8757efc1a780f4fbf8
Gentoo Linux Security Advisory 201110-25 - Multiple vulnerabilities were found in Pure-FTPd allowing attackers to inject FTP commands or cause a denial of service. Versions less than 1.0.32 are affected.
f89bb8f9f3e5f2d7b6836468554ba6a748075ab23fe3df8a94a0041b2fd882a9
Mandriva Linux Security Advisory 2011-094 - A denial-of-service attack related to glob brace expansion was discovered and fixed in pure-ftpd.
18700e0c74f1cc13ea52699ca83aaf6809a6ec0df7836b255d7eb1aa33836167
Multiple vendors are affected by a memory exhaustion vulnerability in libc/glob(3) GLOB_BRACE|GLOB_LIMIT.
1d1f0bb940366641cffd2edd81473a10c047934622b6fc4b18eefc826bbb182e