CVE-2010-3381

CVE-2010-3381 describes a local privilege escalation vulnerability affecting Tangerine 0.3.2.2. The tangerine and tangerine-properties scripts incorrectly place a zero-length directory name in the LD_LIBRARY_PATH, allowing local users to execute arbitrary code with elevated privileges by introducing a malicious shared library into the current working directory. With a CVSS score of 6.9, this vulnerability is considered high severity, requiring local access and medium attack complexity to achieve complete confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.