CVE-2011-1095

CVE-2011-1095 describes a privilege escalation vulnerability in the GNU C Library (glibc) before version 2.13, specifically within the locale program. This flaw allows local users to potentially gain elevated privileges by manipulating localization environment variables, which could be exploited by a program executing a script that utilizes the eval function. The CVSS score of 6.2 indicates a medium severity, with a local attack vector and high attack complexity, but a complete impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.