CVEvulnerability

CVE-2003-0338

5.0 MEDIUM Published 2003-05-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-05-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.

Affected configurations

• wsmp3 wsmp3 daemon 0.0.8 • wsmp3 wsmp3 daemon 0.0.9 • wsmp3 wsmp3 daemon 0.0.10 • wsmp3 wsmp3 web server 0.0.1 • wsmp3 wsmp3 web server 0.0.2 • wsmp3 wsmp3 web server 0.0.3 • wsmp3 wsmp3 web server 0.0.4 • wsmp3 wsmp3 web server 0.0.5 • wsmp3 wsmp3 web server 0.0.6 • wsmp3 wsmp3 web server 0.0.7

References