CVE-2010-3386

CVE-2010-3386 describes a local privilege escalation vulnerability affecting LTTng Userspace Tracer (UST) version 0.7. The vulnerability arises because usttrace places a zero-length directory name in the LD_LIBRARY_PATH, allowing a local attacker to execute arbitrary code with elevated privileges by placing a malicious shared library in the current working directory. With a CVSS score of 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C), this vulnerability has high impact on confidentiality, integrity, and availability, but requires local access and medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.