CVE-2010-3361

CVE-2010-3361 describes a local privilege escalation vulnerability affecting Shrew Soft IKE 2.1.5, specifically within its iked, ikea, and ikec scripts. By placing a zero-length directory name in the LD_LIBRARY_PATH, the vulnerability allows local users to execute arbitrary code with elevated privileges through a malicious shared library in the current working directory. This vulnerability has a CVSS score of 6.9, indicating high severity with complete confidentiality, integrity, and availability impacts, but requires local access and medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.