CVE-2014-0475

CVE-2014-0475 affects glibc (GNU C Library) before 2.20, enabling context-dependent attackers to bypass ForceCommand restrictions via dot-dot in locale environment variables (LC_* or LANG). Connected documents corroborate glibc/eglibc impact and reference related advisories from IBM for FlashSyst...

CVE-2014-0475

Multiple directory traversal vulnerabilities in GNU C Library aka glibc or libc6 before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. dot dot in a 1 LC, 2 LANG, or other locale environment variable...