Linux implementations of TFTP would allow access to files outside the restricted directory.
CVSS Metrics