Serv-U 7.0.0.1 through 7.3 including 7.2.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command probably related to MS-DOS device names as demonstrated using \con:1\.