CVE-2010-3350

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH,
which allows local users to gain privileges via a Trojan horse shared
library in the current working directory.

Bugs

• <https://launchpad.net/bugs/658997&gt;