Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11302
HistoryJan 15, 2019 - 8:59 a.m.

Directory Traversal

2019-01-1508:59:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0.008

Percentile

81.9%

glibc is vulnerable to directory traversal attacks. The vulnerability exists through multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.