CVE Catalog

CVE-1999-0882

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.90%

77th percentile - higher than 77% of all known CVEs

Summary

The Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

Risk Assessment

Revealing the path to the web root may facilitate further attacks on the server, increasing the risk of system compromise.

Recommendation

It is recommended to limit the length of file names and implement additional security measures to minimize the risk of exposing server structure.

Original NVD description (English source)

Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS