Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ... (triple dot) in an HTTP request.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0419
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html