Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU glibc Locale Environment Handling 目录遍历漏洞
Vulnerability Description
GNU C Library（又名glibc，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 GNU C Library 2.20之前版本中存在目录遍历漏洞，该漏洞源于程序未充分过滤某些本地环境变量（如LC_*，LANG等）。上下文相关的攻击者可通过环境变量中的目录遍历字符‘..’绕过ForceCommand限制或造成其他影响。
CVSS Information
N/A
Vulnerability Type
N/A