VulnerabilityModified
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable.
MEDIUM 6.9EPSS 0.30%
Does this matter?
Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.
Description
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.30% probability · 23th percentile
- CISA KEV
- Not listed
- Affected
- nordugrid/nordugrid-arc
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/42496Vendor Advisory
- http://www.nordugrid.org/arc/releases/0_8_3/release_notes_0_8_3.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64434
- http://secunia.com/advisories/42496Vendor Advisory
- http://www.nordugrid.org/arc/releases/0_8_3/release_notes_0_8_3.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64434
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.