CVE-2010-3350

Name of the Vulnerable Software and Affected Versions bareFTP version 0.3.4

Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to bareFTP placing a zero-length directory name in the LD LIBRARY PATH.

Recommendations For bareFTP version 0.3.4, consider restricting access to the LD LIBRARY PATH environment variable to prevent malicious library loading until a patch is available.