CVE-2002-0899: Blueface Falcon Web Server

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).

Affected products

• Blueface Falcon Web Server: version 2.0.0.1021 only; version 2.0.0.1021_ssl only

Published 2002-10-04. Last modified 2026-06-16.