CVE-2003-0338: WSMP3 Daemon

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.

Affected products

• WSMP3 WSMP3 Daemon: version 0.0.8 only; version 0.0.9 only; version 0.0.10 only
• WSMP3 WSMP3 Web Server: version 0.0.1 only; version 0.0.2 only; version 0.0.3 only; version 0.0.4 only; version 0.0.5 only; version 0.0.6 only; …

Published 2003-05-21. Last modified 2026-06-16.