Buffer overflow and directory traversal in NS-rel-doc-name header if search capabilities are turned on.
vulners.com/securityvulns/securityvulns:doc:3185
vulners.com/securityvulns/securityvulns:doc:3187