Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files.
http://www.vupen.com/english/advisories/2005/2277
http://www.securityfocus.com/bid/15284
http://www.f-secure.com/security/fsc-2005-2.shtml
http://securitytracker.com/id?1015143