NVD

Id
8071  
Name
CVE-2011-1095  
Description
locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses the eval function.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-09  
Modified Date
2012-01-26  
Seq
2011-1095  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46040 8071 CVE-2011-1095 http://bugs.gentoo.org/show_bug.cgi?id=330923  View
46041 8071 CVE-2011-1095 [oss-security] 20110308 Re: glibc locale escaping issue  View
46042 8071 CVE-2011-1095 [oss-security] 20110308 Re: glibc locale escaping issue  View
46043 8071 CVE-2011-1095 [oss-security] 20110308 glibc locale escaping issue  View
46044 8071 CVE-2011-1095 oval:org.mitre.oval:def:12272  View
46045 8071 CVE-2011-1095 GLSA-201011-01  View
46046 8071 CVE-2011-1095 1025286  View
46047 8071 CVE-2011-1095 http://sources.redhat.com/bugzilla/show_bug.cgi?id=11904  View
46048 8071 CVE-2011-1095 http://sourceware.org/bugzilla/show_bug.cgi?id=11904  View
46049 8071 CVE-2011-1095 http://sourceware.org/git/?p=glibc.git;a=patch;h=026373745eab50a683536d950cb7e17dc98c4259  View
46050 8071 CVE-2011-1095 MDVSA-2011:178  View
46051 8071 CVE-2011-1095 RHSA-2011:0412  View
46052 8071 CVE-2011-1095 RHSA-2011:0413  View
46053 8071 CVE-2011-1095 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
46054 8071 CVE-2011-1095 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
46055 8071 CVE-2011-1095 ADV-2011-0863  View
46056 8071 CVE-2011-1095 https://bugzilla.redhat.com/show_bug.cgi?id=625893  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31211 JVNDB-2011-001451 GNU C Library の locale/programs/locale.c における権限を取得される脆弱性 GNU C Library (aka glibc or libc6) の locale 内にある locale/programs/locale.c は、引用符付きの出力をしないため、権限を取得される脆弱性が存在します。 CVE-2011-1095 49002 CVE-2011-1095 8071 6.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001451.html 2011-04-04 2012-12-18 View