Accipiter Direct Server Security Vulnerabilities - May

CVE-2004-0072

Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded .. (backslash .., "%5c%2e%2e") sequences in an HTTP request.