NVD

Id
29369  
Name
CVE-2014-0475  
Description
Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-29  
Modified Date
2016-11-28  
Seq
2014-0475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
155856 29369 CVE-2014-0475 http://linux.oracle.com/errata/ELSA-2015-0092.html  View
155857 29369 CVE-2014-0475 DSA-2976  View
155858 29369 CVE-2014-0475 MDVSA-2014:152  View
155859 29369 CVE-2014-0475 [oss-security] 20140710 CVE-2014-0475: glibc directory traversal in LC_* locale handling  View
155860 29369 CVE-2014-0475 [oss-security] 20140714 Re: CVE-2014-0475: glibc directory traversal in LC_* locale handling  View
155861 29369 CVE-2014-0475 68505  View
155862 29369 CVE-2014-0475 1030569  View
155863 29369 CVE-2014-0475 RHSA-2014:1110  View
155864 29369 CVE-2014-0475 GLSA-201602-02  View
155865 29369 CVE-2014-0475 https://sourceware.org/bugzilla/show_bug.cgi?id=17137  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14753 JVNDB-2014-003628 GNU C Library におけるディレクトリトラバーサルの脆弱性 GNU C Library (別名 glibc または libc6) には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-0475 67876 CVE-2014-0475 29369 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003628.html 2014-07-10 2015-02-25 View