CVE-2005-3293: Xerver

Medium severity, CVSS 5.0. EPSS: 7.8% chance of exploitation in the next 30 days.

Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character.

Affected products

• Xerver Xerver: version 4.17h only

Published 2005-10-23. Last modified 2026-06-16.