CVE-2006-1654
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.
Date published : 2006-04-06
http://www.securityfocus.com/bid/17367
http://www.securityfocus.com/archive/1/429984/100/0/threaded