Description
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.
References
- http://musicdaemon.sourceforge.net/
- 20040823 MusicDaemon <= 0.0.3 /etc/shadow Stealer / DoS Exploit mailing-list
- 11006 vdb-entry
- musicd-commands-view-files(17067) vdb-entry