NorduGrid Advanced Resource Connector contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when certain scripts incorrectly set the environment variable 'LD_LIBRARY_PATH' occurs, allowing a local attacker to gain elevated privileges.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 0.8.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
