CVE:CVE-2010-3372
CNNVD:CNNVD-201012-097
NorduGrid Advanced Resource Connector(ARC)是一款按照GPL许可发布的开源软件解决方案，可以实现保证产品质量的计算和数据网格。
NorduGrid Advanced Resource Connector (ARC) 0.8.3之前版本中存在非信任搜索路径漏洞。本地用户可以借助和LD_LIBRARY_PATH环境变量有关的向量获取特权。
solution:Upgrade nordugrid nordugrid-arc to a higher version than 0.8.2,0.3.22,0.3.23,0.3.24,0.3.25,0.3.26,0.3.27,0.3.28,0.3.29,0.3.30,0.3.31,0.3.32,0.3.33,0.3.34,0.3.35,0.3.36,0.3.37,0.3.38,0.3.39,0.3.40,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.5.12,0.5.13,0.5.14,0.5.15,0.5.16,0.5.17,0.5.18,0.5.19,0.5.20,0.5.21,0.5.22,0.5.23,0.5.24,0.5.25,0.5.26,0.5.27,0.5.28,0.5.29,0.5.30,0.5.31,0.5.32,0.5.33,0.5.34,0.5.35,0.5.36,0.5.37,0.5.38,0.5.39,0.5.40,0.5.41,0.5.42,0.5.43,0.5.44,0.5.45,0.5.46,0.5.47,0.5.48,0.5.49,0.5.50,0.5.51,0.5.52,0.5.53,0.5.54,0.5.55,0.5.56,0.5.57,0.5.58,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.8.1,0.8.1.1,0.8.1.1-1,0.8.1.1-2,0.8.2.1,0.8.2.2,and avoid the version (,0.8.2],0.3.22,0.3.23,0.3.24,0.3.25,0.3.26,0.3.27,0.3.28,0.3.29,0.3.30,0.3.31,0.3.32,0.3.33,0.3.34,0.3.35,0.3.36,0.3.37,0.3.38,0.3.39,0.3.40,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.5.12,0.5.13,0.5.14,0.5.15,0.5.16,0.5.17,0.5.18,0.5.19,0.5.20,0.5.21,0.5.22,0.5.23,0.5.24,0.5.25,0.5.26,0.5.27,0.5.28,0.5.29,0.5.30,0.5.31,0.5.32,0.5.33,0.5.34,0.5.35,0.5.36,0.5.37,0.5.38,0.5.39,0.5.40,0.5.41,0.5.42,0.5.43,0.5.44,0.5.45,0.5.46,0.5.47,0.5.48,0.5.49,0.5.50,0.5.51,0.5.52,0.5.53,0.5.54,0.5.55,0.5.56,0.5.57,0.5.58,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.8.1,0.8.1.1,0.8.1.1-1,0.8.1.1-2,0.8.2.1,0.8.2.2