Secunia

Two vulnerabilities have been identified in FSP, allowing malicious people to gain system access or view files outside the root directory.

It is possible to conduct directory traversals using trailing or starting "/" combined with "." in path names. This can be exploited to view files outside the FSP root directory.

An unspecified boundary error also exists, which can be exploited to cause a buffer overflow and may potentially allow execution of arbitrary code.

Solution
The directory traversal vulnerability has been fixed in version 2.8.1b18.
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area