Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.Referenceshttp://www.securityfocus.com/archive/1/391560http://www.securityfocus.com/bid/12662