Unscored CVE-2002-0275 EUVD-2002-0272GHSA-8jxj-w5fr-rjvp

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) …

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL.

References

20020213 Falcon Web Server Authentication Circumvention Vulnerability mailing-list
20020526 [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability mailing-list
4099 vdb-entry
20020526 [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability mailing-list
falcon-protected-dir-access(8189) vdb-entry