CVE-2010-3355

Name of the Vulnerable Software and Affected Versions Ember version 0.5.7

Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to Ember placing a zero-length directory name in the LD LIBRARY PATH.

Recommendations For Ember version 0.5.7, consider restricting access to the LD LIBRARY PATH environment variable to prevent unauthorized modifications until a patch is available. As a temporary workaround, avoid using shared libraries from untrusted sources in the current working directory.