Vulnerability in Nordugrid Nordugrid-Arc

CVE-2010-3372

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information.

EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.

Affected products

Nordugrid Nordugrid-arc — versions 0.5.39, 0.3.36, 0.4.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)