It's possible to cause server's DoS and access mp3 files in any directory.
vulners.com/securityvulns/securityvulns:doc:1767
vulners.com/securityvulns/securityvulns:doc:3188