PT-2004-2644 · Music Daemon · Musicd

Tal0N · Publicado 2004-08-23 · Atualizado 2017-07-11 · CVE-2004-1740

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Music daemon (musicd) versions 0.0.3 and earlier

Description The issue allows remote attackers to read arbitrary files. This is achieved by calling LOAD with a full pathname, then calling SHOWLIST.

Recommendations For Music daemon (musicd) versions 0.0.3 and earlier, consider restricting access to the LOAD and SHOWLIST functions until a patch is available. As a temporary workaround, avoid using the LOAD function with full pathnames to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-1740

Produtos afetados

Musicd

Referências · 5

• 🔥 http://securityfocus.com/bid/11006 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17067 · Nota
• http://marc.info/?l=bugtraq&m=109329098806595&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1740 · Nota de Segurança
• http://musicdaemon.sourceforge.net · Correção