CVE-2010-3387

CVE-2010-3387 affects Video Disk Recorder (VDR) 1.6.0; the vdrleaktest places a zero-length directory name in LD_LIBRARY_PATH, enabling local users to gain privileges via a Trojan horse shared library in the current working directory. Multiple connected sources echo this impact, with third-party ...