Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.
http://www.securityoffice.net/articles/liteserve/
http://www.securityfocus.com/bid/6042
http://www.iss.net/security_center/static/10468.php
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-10/0372.html