The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.

BID:373 | URL:http://www.securityfocus.com/bid/373 | BUGTRAQ:19970420 IRIX 6.x /cgi-bin/wrap bug | OSVDB:247 | URL:http://www.osvdb.org/247 | SGI:19970501-02-PX | URL:ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX | XF:http-sgi-wrap(290) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/290