Apple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 doesnot verify that requested files and directories are inside shared folders, whichallows remote attackers to read arbitrary files via unspecified AFP traffic.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1027)