Local User Vulnerability in Gargoyle-Free by Debian

CVE-2010-3359

What is CVE-2010-3359?

A vulnerability in Gargoyle-Free prior to August 25, 2009, occurs when the LD_LIBRARY_PATH environment variable is not defined. This situation allows a local user to create a malicious library (libgarglk.so) in the current directory. If another user inadvertently runs Gargoyle-Free in this directory, the malicious library will be executed, potentially granting the local user unauthorized access to the victim's account and sensitive data.

References