CVE-2003-0338

WsMp3 daemon < 0.0.10 - Unauthenticated Directory Traversal via HTTP Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0338. PoCs published by dong-h0un U.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in WsMp3 via an HTTP POST request, allowing arbitrary file execution. The PoC uses a simple telnet command to send a malicious POST request to execute '/bin/ps'.

Description

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.

Exploits (1)

exploitdb WORKING POC VERIFIED
by dong-h0un U · textremotelinux
https://www.exploit-db.com/exploits/22623

This exploit demonstrates a directory traversal vulnerability in WsMp3 via an HTTP POST request, allowing arbitrary file execution. The PoC uses a simple telnet command to send a malicious POST request to execute '/bin/ps'.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: WsMp3 (version not specified)
No auth needed
Prerequisites: Network access to the target server · WsMp3 service running on port 8000
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105353168619211&w=2

Scores

EPSS 0.0303
EPSS Percentile 85.8%

Details

Status published
Products (10)
wsmp3/wsmp3_daemon 0.0.8
wsmp3/wsmp3_daemon 0.0.9
wsmp3/wsmp3_daemon 0.0.10
wsmp3/wsmp3_web_server 0.0.1
wsmp3/wsmp3_web_server 0.0.2
wsmp3/wsmp3_web_server 0.0.3
wsmp3/wsmp3_web_server 0.0.4
wsmp3/wsmp3_web_server 0.0.5
wsmp3/wsmp3_web_server 0.0.6
wsmp3/wsmp3_web_server 0.0.7
Published May 21, 2003
Tracked Since Feb 18, 2026