CVE-2011-2524
Fixed in a distro release EPSS 2%
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
Products: gnome libsoup
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libsoup2.4 | 2.34.3-1 |
| Debian 13 | libsoup2.4 | 2.34.3-1 |
| Debian 5.0 | libsoup2.4 | 2.4.1-2+lenny1 |
| Debian 6.0 | libsoup2.4 | 2.30.2-1+squeeze1 |
| Red Hat Enterprise Linux 6 | libsoup | 0:2.28.2-1.el6_1.1 |
| Red Hat Enterprise Linux 6 | libsoup-debuginfo | 0:2.28.2-1.el6_1.1 |
| Red Hat Enterprise Linux 6 | libsoup-devel | 0:2.28.2-1.el6_1.1 |