CVE-2010-3389
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or...
CVE-2010-3389 is a medium vulnerability (CVSS 6.9) in Linux-ha Ocf Resource Agents, published October 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in rgmanager 0:1.9.88-2.el4.
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Exploit likelihood
What each source reports
NVD Score used
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
- Record
CVE-2010-3389- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
- Record
CVE-2010-3389- Updated
- 2026-11-02
EUVDEUVD-2010-3387 No score
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
- Record
EUVD-2010-3387- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-23qc-j55g-qfm7 No score
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or...
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
- Record
GHSA-23qc-j55g-qfm7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rgmanagerRed Hat:rhel_cluster:4 |
before 0:1.9.88-2.el4 | 0:1.9.88-2.el4 |
rgmanager-debuginfoRed Hat:rhel_cluster:4 |
before 0:1.9.88-2.el4 | 0:1.9.88-2.el4 |
rgmanagerRed Hat:rhel_cluster:5 |
before 0:2.0.52-21.el5 | 0:2.0.52-21.el5 |
rgmanager-debuginfoRed Hat:rhel_cluster:5 |
before 0:2.0.52-21.el5 | 0:2.0.52-21.el5 |
resource-agentsRed Hat:enterprise_linux:6::server |
before 0:3.9.2-7.el6 | 0:3.9.2-7.el6 |
resource-agents-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.9.2-7.el6 | 0:3.9.2-7.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=639044
vupen.com/english/advisories/2011/0416
bugs.debian.org/cgi-bin/bugreport.cgi?bug=598549
redhat.com/support/errata/RHSA-2011-0264.html
secunia.com/advisories/43372
Show 50 moreShow less
security.gentoo.org/glsa/glsa-201110-18.xml
nvd.nist.gov/vuln/detail/CVE-2010-3389
github.com/advisories/GHSA-23qc-j55g-qfm7
access.redhat.com/errata/RHSA-2011:0264
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0264.json
cve.org/CVERecord?id=CVE-2008-6552