Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.Referenceshttp://www.osvdb.org/19http://www.securityfocus.com/bid/1025http://www.securityfocus.com/templates/archive.pike?list=1&msg=41256894.00492503.00%40mailgw.backupcentralen.se
