Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125 and probably earlier versions allows remote authenticated users to read or delete arbitrary files via \..//\ sequences in a COMB command.