Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html | Exploit Vendor Advisory |
http://marc.info/?l=bugtraq&m=105353168619211&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-05-20 21:00
Updated : 2016-10-17 19:32
NVD link : CVE-2003-0338
Mitre link : CVE-2003-0338
JSON object : View
CWE
Products Affected
wsmp3
- wsmp3_web_server
- wsmp3_daemon