It's possible to obtain physical path and directory listing.
vulners.com/securityvulns/securityvulns:doc:3002
vulners.com/securityvulns/securityvulns:doc:3003
vulners.com/securityvulns/securityvulns:doc:3004