Vulnerability in Wsmp3 Daemon
CVE-2003-0338
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.
EPSS: 0.030 (86.1th percentile) — read the EPSS interpretation.
Affected products
- Wsmp3 Wsmp3_daemon — versions 0.0.8, 0.0.9, 0.0.10
- Wsmp3 Wsmp3_web_server — versions 0.0.1, 0.0.2, 0.0.3
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH, Exploit)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)