SUSE CVE-2010-3372

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...

CVE-2010-3372

CVE-2010-3372 affects NorduGrid ARC prior to 0.8.3, where an untrusted search path via LD_LIBRARY_PATH allows local users to escalate privileges. Affected component: ARC’s runtime/library loading; root cause is improper handling of LD_LIBRARY_PATH. Impact per sources is privilege escalation on lo...