Gentoo Linux Security Advisory GLSA 200511-16 – Ludwig Nussel from SUSE Linux has identified two vulnerabilities in GNUMP3d. GNUMP3d fails to properly check for the existence of /tmp/index.lok before writing to the file, allowing for local unauthorized access to files owned by the user running GNUMP3d. GNUMP3d also fails to properly validate the theme GET variable from CGI input, allowing for unauthorized file inclusion. Versions less than 2.9.7-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41759/glsa-200511-16.txt
Source: https://packetstormsecurity.com/files/41759/Gentoo-Linux-Security-Advisory-200511-16.html