The Windows FTP Server is a small free third party ftp server which contains a format string vulnerability in v1.6.1 and below.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32495/windows.ftp.server.txt
Source: https://packetstormsecurity.com/files/32495/windows.ftp.server.txt.html