Vulnerability Development: proftp DoS in debian stable?

["Joe Dollard" <joed () devel livenote com>]

My system is running debian stable with all patches installed (via apt-get
from security.debian.org).  My proftp daemon (as installed from the debian
deb's - 1.2.0pre10-2.0) still seems vulnerable to the glob DoS attack, as
discovered on the 15th March 2001. i.e. typing
`ls */../*/../*/../*/../*/../*/../*/../*/../*/../*/../*/../*/../*` results
in 100% of the CPU and memory resources are consumed.
 (more info at http://proftpd.linux.co.uk/critbugs.html).  No fix or work
around seems in place in the debian stable deb's.

Can anyone confirm the same behaviour on their system?

I contacted security () debian org about this on the 12th February, a
discussion was entered but no resolution occurred.  Contacted
security () debian org again on the 21st of February and haven't received a
response.

Regards,
Joe Dollard