CVE-2005-3293 Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character.
MediumCVSS 5.0
EPSS 7.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerver | = 4.17h | No fix listed |
References
- 17243 exploit patch third-party-advisory vendor-advisory
- 1015079 exploit vdb-entry
- 20075 vdb-entry
- 20076 vdb-entry
- 15135 exploit patch vdb-entry
- xerver-source-code-disclosure(22785) vdb-entry
- xerver-null-character-directory-traversal(22786) vdb-entry