Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack.
https://exchange.xforce.ibmcloud.com/vulnerabilities/6481
http://www.securityfocus.com/bid/2672