CVE-2004-1740: Music Daemon

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.

Affected products

• Music Daemon Music Daemon: version 0.1 only; version 0.2 only; version 0.3 only

Published 2004-08-23. Last modified 2026-06-16.