This is already fixed in the latest Feisty merge. ** Changed in: proftpd-dfsg (Ubuntu) Status: Confirmed => Fix Released -- remote code execution in ProFTPD https://launchpad.net/bugs/73603