CVE-2010-3372: Nordugrid Nordugrid-Arc

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information.

Affected products

• Nordugrid Nordugrid-Arc: up to and including 0.8.2; version 0.3.22 only; version 0.3.23 only; version 0.3.24 only; version 0.3.25 only; version 0.3.26 only; …

Published 2010-12-08. Last modified 2026-06-16.