A vulnerability in Borland Web Server for Corel Paradox has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing directory traversal sequences such as '%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini' and '..................../autoexec.bat' to the affected server.