Falcon web server allows remote malicious users to read arbitrary files via a .. (dot dot) attack.
blueface falcon web server 1.0