Security Advisory

CVE-2014-0475

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-07-29 14:00:00

Last updated 2024-08-06 09:20:17

Assigner debian

CVSS score not scored

State PUBLISHED

Description

Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.

← Browse all CVEs View on cve.org ↗