Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461. http://www.milw0rm.com/exploits/4567
we are not affected (webdav server issue, jboss uses client only)