{
    "id": "CVE-2003-0338",
    "published": "2003-05-21 04:00:00",
    "last_modified": "2026-06-16 22:02:01",
    "cvss_score": "5.0",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "cwe": null,
    "description": "Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.",
    "epss_score": "0.03032",
    "epss_percentile": "0.87052",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-05 18:17:03",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "wsmp3",
            "product": "wsmp3_daemon"
        },
        {
            "vendor": "wsmp3",
            "product": "wsmp3_web_server"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "22623",
            "title": "WSMP3 0.0.x - Remote Command Execution",
            "date": "2003-05-21",
            "url": "https://www.exploit-db.com/exploits/22623"
        }
    ],
    "refs_list": [
        "http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html",
        "http://marc.info/?l=bugtraq&m=105353168619211&w=2",
        "http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html",
        "http://marc.info/?l=bugtraq&m=105353168619211&w=2"
    ]
}