CVE-2010-3372: Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows loca...

Security readout for executives and security teams

CVE-2010-3372 is a local privilege escalation issue in NorduGrid Advanced Resource Connector before 0.8.3. A user who already has local access could abuse unsafe library search behavior tied to LD_LIBRARY_PATH to gain higher privileges. The public record does not show active exploitation or a CVSS score. Exposure is most likely on legacy hosts running NorduGrid ARC versions earlier than 0.8.3, especially shared grid or HPC systems where local user accounts exist. The source bundle lacks complete product metadata and CPEs, so asset validation is required. Prioritize this where legacy ARC systems support shared user access or sensitive workloads. It is not described as remotely exploitable, but local privilege escalation can convert a low-privilege account into a host compromise. Mitigation focus: Inventory all NorduGrid ARC installations and versions.; Upgrade ARC to 0.8.3 or later where vendor guidance confirms applicability.; Review vendor release notes and advisories for supported remediation details..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.