k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service (service crash) via a long filename in a crafted request.
http://www.securityfocus.com/bid/33289
http://www.securityfocus.com/archive/1/500107/100/0/threaded