COMMAND

    Offline Explorer

SYSTEMS AFFECTED

    MetaProducts Offline Explorer prior to 1.4 SR2

PROBLEM

    'dodger' found following.  The Offline Explorer 1.4 has a  serious
    bug.  It's similar to the fixed http://127.0.0.1:800/./../../ bug.
    With

        http://127.0.0.1:800/C:/

    it is possible to access the harddrive and read all files.

SOLUTION

    This bug  is fixed  in the  newest version  (Offline Explorer  1.4
    Service Release 2).