CVE-2010-3362

Name of the Vulnerable Software and Affected Versions lastfm version 1.5.4

Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to lastfm placing a zero-length directory name in the LD LIBRARY PATH.

Recommendations For version 1.5.4, consider restricting access to the LD LIBRARY PATH environment variable to prevent malicious library loading until a patch is available. As a temporary workaround, avoid using lastfm in environments where untrusted users can influence the current working directory.