CVE-2002-0447: Xerver

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.

Affected products

• Xerver Xerver: up to and including 2.10

Published 2002-07-26. Last modified 2026-06-16.