man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.Referenceshttps://www.securityfocus.com/archive/1/542208/100/0/threadedhttp://packetstormsecurity.com/files/148855/man-cgi-Local-File-Inclusion.html