Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.Referenceshttp://www.securityfocus.com/bid/9346
