Secunia

A vulnerability has been reported in CA Unicenter Web Services Distributed Management (WSDM), which can be exploited by malicious people to disclose sensitive information.

The vulnerability is caused due to an error within the included Jetty WebServer, which does not correctly check path names in HTTP requests. This can be exploited to access arbitrary files on a vulnerable system via directory traversal attacks.

The vulnerability has been reported in versions prior to version 3.11. Other versions may also be affected.

Note: This vulnerability may be related to:
SA7178

Solution
Update to WSDM 3.11 or later.

Provided and/or discovered by
Oliver Karow and Richard Sammet, Symantec

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area