cve/2012/CVE-2012-3381.md

CVE-2012-3381

Description

sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

POC

Reference

• http://sourceforge.net/tracker/index.php?func=detail&aid=3541554&group_id=128809&atid=712784

Github

No PoCs found on GitHub currently.