CVE-2010-3376

CVE-2010-3376 describes a privilege escalation vulnerability affecting ROOT version 5.18/00, specifically within its proofserv, xrdcp, xrdpwdadmin, and xrd scripts. The flaw stems from these scripts placing a zero-length directory name in the LD_LIBRARY_PATH, allowing local attackers to gain privileges by introducing a malicious shared library into the current working directory. With a CVSS score of 6.9, this vulnerability is of medium severity, requiring local access and moderate attack complexity to achieve complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.