CVE-2004-1740: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD wit...

Security readout for executives and security teams

CVE-2004-1740 affects Music daemon (musicd) 0.0.3 and earlier. A remote attacker could make the service read local files, potentially exposing sensitive system data. The bundle provides no CVSS score and no active-exploitation evidence, but the impact can be serious if the daemon is reachable and runs with broad file permissions. Exposure is most likely on legacy systems still running musicd 0.0.3 or earlier, especially if reachable over untrusted networks. Modern environments are unlikely to be affected unless this old daemon remains installed for niche audio or legacy service use. Prioritize remediation if any instance is internet-facing or handles sensitive host data. This is old software, so the practical goal should be removal, isolation, or replacement rather than extended compensating control management. Mitigation focus: Identify and remove unsupported musicd deployments where no business need exists.; Check vendor or project guidance before assuming a fixed replacement version.; Restrict musicd access to trusted hosts only if temporary operation is required..

Prepared

Jun 29, 2026, 23:55 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.