CVE-2003-1139

Musicqueue 1.2.0 - Info Disclosure

Title source: llm

Description

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by dong-h0un U · clocallinux

https://www.exploit-db.com/exploits/23297

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://secunia.com/advisories/10104

[Exploit, Vendor Advisory] http://securitytracker.com/id?1008014

[Exploit, Vendor Advisory] http://www.securityfocus.com/bid/8899

[Exploit, Vendor Advisory] http://www.securityfocus.com/archive/1/342476

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/13520

[Third Party Advisory] http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html

Scores

EPSS 0.0280

EPSS Percentile 86.2%

Details

Status published

Products (1)

musicqueue/musicqueue 1.2

Published Oct 27, 2003

Tracked Since Feb 18, 2026