CVE-2006-5034
Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Date published : 2006-09-27
http://www.securityfocus.com/bid/19958
http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html