Summary
It is possible to make the remote host return the content of any world readable file by requesting a path outside the bound HTML root directory from the Snif program.
An attacker may use this flaw to view sensitive files that reside on the remote host.
Solution
Upgrade to Snif version 1.2.5 or newer