Directory traversal vulnerability in Cisco Internet Streamer as used in Cisco Content Delivery System (CDS) 2.2.x 2.3.x 2.4.x and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.