CVE-2011-2524: Path Traversal
Published Aug 31, 2011
·Updated
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
Affected Software
74 affected components
Gnome libsoup<=2.35.3
Gnome libsoup=2.0
Gnome libsoup=2.2
Gnome libsoup=2.2.0
Gnome libsoup=2.2.1
Gnome libsoup=2.2.2
Gnome libsoup=2.2.3
Gnome libsoup=2.2.4
Gnome libsoup=2.2.5
Gnome libsoup=2.2.6
Gnome libsoup=2.2.6.1
Gnome libsoup=2.2.7
Gnome libsoup=2.2.91
Gnome libsoup=2.2.92
Gnome libsoup=2.2.93
Gnome libsoup=2.2.94
Gnome libsoup=2.2.95.1
Gnome libsoup=2.2.96
Gnome libsoup=2.2.97
Gnome libsoup=2.2.98
Gnome libsoup=2.2.99
Gnome libsoup=2.2.100
Gnome libsoup=2.2.101
Gnome libsoup=2.2.102
Gnome libsoup=2.2.103
Gnome libsoup=2.2.104
Gnome libsoup=2.3.0.1
Gnome libsoup=2.3.2
Gnome libsoup=2.3.4
Gnome libsoup=2.4.0
Gnome libsoup=2.4.1
Gnome libsoup=2.23.1
Gnome libsoup=2.23.6
Gnome libsoup=2.23.91
Gnome libsoup=2.23.92
Gnome libsoup=2.24.0.1
Gnome libsoup=2.24.1
Gnome libsoup=2.25.2
Gnome libsoup=2.25.3
Gnome libsoup=2.25.4
Gnome libsoup=2.25.5
Gnome libsoup=2.25.91
Gnome libsoup=2.26.0
Gnome libsoup=2.26.1
Gnome libsoup=2.27.1
Gnome libsoup=2.27.2
Gnome libsoup=2.27.4
Gnome libsoup=2.27.5
Gnome libsoup=2.27.90
Gnome libsoup=2.27.91
Gnome libsoup=2.27.92
Gnome libsoup=2.28.0
Gnome libsoup=2.28.1
Gnome libsoup=2.29.3
Gnome libsoup=2.29.5
Gnome libsoup=2.29.6
Gnome libsoup=2.29.90
Gnome libsoup=2.29.91
Gnome libsoup=2.30.0
Gnome libsoup=2.30.1
Gnome libsoup=2.31.2
Gnome libsoup=2.31.6
Gnome libsoup=2.31.90
Gnome libsoup=2.31.92
Gnome libsoup=2.32.0
Gnome libsoup=2.32.1
Gnome libsoup=2.32.2
Gnome libsoup=2.33.4
Gnome libsoup=2.33.5
Gnome libsoup=2.33.6
Gnome libsoup=2.33.90
Gnome libsoup=2.33.92
Gnome libsoup=2.34.0
Gnome libsoup=2.34.1
Remediation
Patch Available
Event History
Aug 31, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2524?
CVE-2011-2524 has been classified as a moderate severity vulnerability due to the potential for arbitrary file access.
2
How do I fix CVE-2011-2524?
To fix CVE-2011-2524, update libsoup to version 2.35.4 or later.
3
What kind of vulnerability is CVE-2011-2524?
CVE-2011-2524 is a directory traversal vulnerability that allows attackers to read arbitrary files.
4
Which versions of libsoup are affected by CVE-2011-2524?
CVE-2011-2524 affects libsoup versions prior to 2.35.4, including 2.2 and 2.0 versions.
5
Can CVE-2011-2524 be exploited remotely?
Yes, CVE-2011-2524 can be exploited remotely by sending crafted URIs to the vulnerable service.