CVE:CVE-2004-1444
CNNVD:CNNVD-200412-599
Roundup 0.6.4及其早期版本存在目录遍历漏洞。远程攻击者可以借助HTTP GET请求中的@@命令的..（点 点）序列浏览任意文件。
solution:Upgrade roundup-tracker roundup to a higher version than 0.6.4,0.1.0,0.1.1,0.1.2,0.1.3,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.3.0,0.3.0:pre1,0.3.0:pre2,0.3.0:pre3,0.4.0,0.4.0:b1,0.4.0:b2,0.4.1,0.4.2,0.4.2:pr1,0.5,0.5.0,0.5.0:beta1,0.5.0:beta2,0.5.0:pr1,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8:stable,0.5.9,0.6.0,0.6.0:b1,0.6.0:b2,0.6.0:b3,0.6.0:b4,0.6.1,0.6.2,0.6.3,and avoid the version (,0.6.4],0.1.0,0.1.1,0.1.2,0.1.3,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.3.0,0.3.0:pre1,0.3.0:pre2,0.3.0:pre3,0.4.0,0.4.0:b1,0.4.0:b2,0.4.1,0.4.2,0.4.2:pr1,0.5,0.5.0,0.5.0:beta1,0.5.0:beta2,0.5.0:pr1,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8:stable,0.5.9,0.6.0,0.6.0:b1,0.6.0:b2,0.6.0:b3,0.6.0:b4,0.6.1,0.6.2,0.6.3