AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.