CVE-2009-3902

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. (slash backslash dot dot) in the URL.