CVE-2005-3123: GNU GNUMP3D

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

Affected products

• GNU GNUMP3D: version 2.9 only; version 2.9.1 only; version 2.9.2 only; version 2.9.3 only; version 2.9.4 only; version 2.9.5 only

Published 2005-10-30. Last modified 2026-06-16.