Description
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information.
References
- http://www.nordugrid.org/arc/releases/0_8_3/release_notes_0_8_3.html
- 42496 third-party-advisory
- arc-ldlibpath-priv-escalation(64434) vdb-entry