SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.
https://exchange.xforce.ibmcloud.com/vulnerabilities/20011
http://www.securityfocus.com/bid/13054
http://www.security.org.sg/vuln/surgeftp22m1.html
http://securitytracker.com/id?1013664