PT-2004-2644 · Music Daemon · Musicd

Tal0N · Published 2004-08-23 · Updated 2017-07-11 · CVE-2004-1740

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Music daemon (musicd) versions 0.0.3 and earlier

Description The issue allows remote attackers to read arbitrary files. This is achieved by calling LOAD with a full pathname, then calling SHOWLIST.

Recommendations For Music daemon (musicd) versions 0.0.3 and earlier, consider restricting access to the LOAD and SHOWLIST functions until a patch is available. As a temporary workaround, avoid using the LOAD function with full pathnames to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-1740

Affected Products

Musicd

References · 5

• 🔥 http://securityfocus.com/bid/11006 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1740 · Security Note
• http://musicdaemon.sourceforge.net · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17067 · Note
• http://marc.info/?l=bugtraq&m=109329098806595&w=2 · Note