Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Music_daemon | Music_daemon | 0.1 (including) | 0.1 (including) |
| Music_daemon | Music_daemon | 0.2 (including) | 0.2 (including) |
| Music_daemon | Music_daemon | 0.3 (including) | 0.3 (including) |