Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125 and probably earlier versions allows remote authenticated users to read arbitrary files determine file size via \..//\ sequences in the xcrc command.