Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via \@\ (at) characters in a CD (CWD) command such as (1) \@/....\\\ (2) \@@@/..c:\\\ or (3) \@/..@/..\.