CVE-2010-3393

CVE-2010-3393 describes a privilege escalation vulnerability in Magics++ 2.10.0, where the magics-config utility places a zero-length directory name in the LD_LIBRARY_PATH. This allows local attackers to gain elevated privileges by tricking the system into loading a malicious shared library from the current working directory. The vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, but requires medium attack complexity and local access. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.