CVE-2010-3350

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local...

6.9 Medium

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Exploit likelihood

0.32%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: CVE-2010-3350
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: CVE-2010-3350
Updated: 2026-11-02

EUVDEUVD-2010-3348 No score

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: EUVD-2010-3348
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7xr4-52vv-2ffw No score

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local...

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: GHSA-7xr4-52vv-2ffw
Weakness: CWE-20
Updated: 2026-11-02

Affected products

bareftp

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3350 is a medium vulnerability (CVSS 6.9) in Bareftp, published October 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. No source names a fixed version.

References

Show 4 moreShow less