Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6 and Novell Small Business Suite 5.1 and 6 allows remote attackers to read arbitrary files via a URL containing a \..%5c\ sequence (modified dot-dot) which is mapped to the directory separator.