Falcon web server allows remote malicious users to determine the absolute path of the web root via long file names.
falcon falcon web server 1.0.0.1006