CVE-2003-0338

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2003
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2003

CVE-2003-03397.5Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HCVE-2003-03407.5Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names andCVE-2003-03416.8Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the CVE-2003-03424.6BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blCVE-2003-03434.6BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message whCVE-2003-03447.5Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) charactersCVE-2003-03457.5Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibCVE-2003-03467.5Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MCVE-2003-034710.0Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackCVE-2003-03486.4A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the loCVE-2003-03497.5Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft WindowsCVE-2003-03504.6The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windo
CVE-2003-0338: Medium severity, CVSS 5.0 | Vulnix