Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/54932
http://www.vupen.com/english/advisories/2009/3595
http://www.serv-u.com/releasenotes/