CVE-2010-4181

Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ dot dot backslash and other sequences...