A software system that accepts input in the form of a dot dot backslash ('..\filename') without appropriate validation can allow an attacker to traverse the file system to access an arbitrary file. Note that '..' is ignored if the current working directory is the root directory.