CVE:CVE-2003-0338
CNNVD:CNNVD-200305-050
WsMp3 daemon (WsMp3d) 0.0.10及其早期版本存在目录遍历漏洞。远程攻击者可以通过在HTTP GET或POST请求中的.. （点点）序列读取和执行任意文件。
solution:Upgrade wsmp3 wsmp3_daemon to a higher version than 0.0.8,0.0.9,0.0.10,and avoid the version 0.0.8,0.0.9,0.0.10; Upgrade wsmp3 wsmp3_web_server to a higher version than 0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,and avoid the version 0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7