The FTP Daemon in the Sasser virus had a exploitable flaw.
vuln-sasserftpd { ports ("5554","1023"); accepttimeout "30"; };