I think DSA-281 [1] addresses this buffer overflow in moxftp, but I haven't looked to see if it is the same issue. [1] http://www.debian.org/security/2003/dsa-281 Drew Daniels