Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1532)