CVE-2010-3359

CVE-2010-3359 affects gargoyle-free prior to 2009-08-25: if LD_LIBRARY_PATH is undefined, it may point to the current directory, allowing a local user to trick another user into executing gargoyle in a directory containing a cracked libgarglk.so and gain access to the user's account. The connecte...