CVE-2010-3387

CVE-2010-3387 describes a local privilege escalation vulnerability in Video Disk Recorder (VDR) version 1.6.0, specifically within the vdrleaktest script, affecting products like tvdr and vdr. The flaw arises from the script's erroneous use of a zero-length directory name in LD_LIBRARY_PATH, enabling local users to execute arbitrary code with elevated privileges via a malicious shared library. This vulnerability has a CVSS score of 6.9, indicating high severity due to its potential for complete compromise of confidentiality, integrity, and availability with medium attack complexity. While there is no known active exploitation, publicly available exploit code, or Metasploit/Nuclei modules, the CVE has garnered significant community discussion with 10 mentions.