A buffer overflow with possible remote code execution was found in the APPE command in WFTPD Pro Server 3.23.