Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.Referenceshttp://securitytracker.com/id?1016875http://securityreason.com/securityalert/1636http://www.securityfocus.com/archive/1/446228/100/0/threadedhttp://www.securityfocus.com/bid/20067