CVE-2001-0593
Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a ‘..’ (dot dot) attack in the template parameter.
Date published : 2002-03-09
http://www.securityfocus.com/bid/2512
http://archives.neohapsis.com/archives/bugtraq/2001-03/0395.html