Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
https://exchange.xforce.ibmcloud.com/vulnerabilities/46461
http://www.vupen.com/english/advisories/2008/3082
http://www.securityfocus.com/bid/32187