CVE-2010-3350

CVE-2010-3350 describes a local privilege escalation vulnerability in bareFTP version 0.3.4. The application incorrectly adds a zero-length directory to the LD_LIBRARY_PATH, allowing an attacker to execute malicious code via a Trojan horse shared library placed in the current working directory. With a CVSS score of 6.9 (high severity), this flaw permits an attacker to achieve full compromise of confidentiality, integrity, and availability on the affected system, though it requires local access and medium attack complexity. There is no evidence of active exploitation, nor are there public exploits available in Metasploit or ExploitDB, but the vulnerability has garnered significant community discussion.