medium6.9
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to th…
Impact
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nordugrid | Nordugrid-Arc | through 0.8.2 Versions 0.3.22, 0.3.23, 0.3.24, 0.3.25, 0.3.26 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/42496
- http://www.nordugrid.org/arc/releases/0_8_3/release_notes_0_8_3.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64434
- http://secunia.com/advisories/42496
- http://www.nordugrid.org/arc/releases/0_8_3/release_notes_0_8_3.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64434