Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/54932
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4778
http://www.vupen.com/english/advisories/2009/3595
http://www.serv-u.com/releasenotes/