CVE-2003-0338

Published: May 21, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.

Affected (10)

Products: Wsmp3: Wsmp3 Daemon, Wsmp3 Web Server

Wsmp3

2 products

Wsmp3 Daemon

Wsmp3 Web Server

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Wsmp3 Wsmp3 Daemon	Version 0.0.10
Wsmp3 Wsmp3 Daemon	Version 0.0.8
Wsmp3 Wsmp3 Daemon	Version 0.0.9
Wsmp3 Wsmp3 Web Server	Version 0.0.1
Wsmp3 Wsmp3 Web Server	Version 0.0.2
Wsmp3 Wsmp3 Web Server	Version 0.0.3
Wsmp3 Wsmp3 Web Server	Version 0.0.4
Wsmp3 Wsmp3 Web Server	Version 0.0.5
Wsmp3 Wsmp3 Web Server	Version 0.0.6
Wsmp3 Wsmp3 Web Server	Version 0.0.7

References (4)

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=105353168619211&w=2

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=105353168619211&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.