Spawning a service on a random port that lets unauthenticated users write arbitrary files to your system is a very bad idea. ;-)

If you have shell access via SSH, why not just use SFTP? Presumably it's configured as well.