CVE-1999-0882: Medium severity Falcon Falcon web server vulnerability
Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure the Falcon web server (or its fronting proxy) to reject or limit requests containing overly long file names or path segments, or to normalize/truncate long path segments, so that overly long filenames cannot be used to disclose the absolute web-root path.
Falcon web server reject_overlong_filenames = enabled - Compensating control
Restrict access to the Falcon web server to trusted IP addresses (via firewall, VPN, or network ACLs) and/or place it behind a WAF/reverse proxy that blocks requests with abnormally long path segments to mitigate remote exploitation.
- Operational
Review and monitor web server logs for requests containing unusually long file names or path segments, enable alerts for repeated attempts, and sanitize or remove detailed filesystem path information from error responses to reduce information leakage.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0882?
CVE-1999-0882 has a medium severity level as it exposes the absolute path of the web root to remote attackers.
How do I fix CVE-1999-0882?
To mitigate CVE-1999-0882, update Falcon web server to a version that addresses this vulnerability.
What versions are affected by CVE-1999-0882?
CVE-1999-0882 specifically affects Falcon web server version 1.0.0.1006.
What type of attackers can exploit CVE-1999-0882?
Remote attackers can exploit CVE-1999-0882 to gather sensitive path information.
What impact does CVE-1999-0882 have on security?
CVE-1999-0882 can lead to further attacks by revealing the server's directory structure.