CVE-2010-3359

CVE-2010-3359 describes a local privilege escalation vulnerability in gargoyle-free versions prior to 2009-08-25, affecting Debian Linux and the Gargoyle project. If the LD_LIBRARY_PATH environment variable is undefined, it defaults to the current directory, allowing a local attacker to trick another user into executing gargoyle with a malicious libgarglk.so library. This medium-severity vulnerability (CVSS 4.8) requires user interaction and local access, potentially leading to limited impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.