NorduGrid Advanced Resource Connector "LD_LIBRARY_PATH" Local Privilege Escalation

  Bookmark
 and Share

The NorduGrid Advanced Resource Connector (ARC) is an application that uses grid technologies to enable the sharing and federation of computing and storage resources distributed across different administrative and application domains. The NorduGrid Advanced Resource Connector is exposed to a local privilege escalation issue because it fails to properly set the "LD_LIBRARY_PATH" environment variable. NorduGrid Advanced Resource Connector versions prior to 0.8.3 are affected.

Ref: http://osdir.com/ml/debian-bugs-dist/2010-12/msg01521.html

10.50.35 - CVE: CVE-2010-3372
Platform: Cross Platform