So this is a buffer overflow on the server side! Could probably have been used for RCE on their infrastructure. No NX, no ASLR, etc. of course it would be difficult to work it blindly without the binary or some sort of info leak.