CVE-2010-3384

Name of the Vulnerable Software and Affected Versions TORCS version 1.3.1

Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the torcs, nfsperf, accc, texmapper, trackgen, and nfs2ac scripts in TORCS placing a zero-length directory name in the LD LIBRARY PATH.

Recommendations For TORCS version 1.3.1, consider restricting access to the LD LIBRARY PATH environment variable to prevent malicious library loading. As a temporary workaround, avoid using the affected scripts until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.