CVE-2010-3996

The CVE-2010-3996 issue affects Festival Server (CSTR Festival), probably in versions up to 2.0.95-beta and earlier. The root cause is an unsafe LD_LIBRARY_PATH implementation that places a zero-length directory name, enabling a local attacker to load a Trojan horse shared library from the curren...