[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20110728183127.GU1476@redhat.com>
Date: Thu, 28 Jul 2011 12:31:28 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2011-2524: libsoup's SoupServer directory traversal flaw
Hello everyone. Just a heads up to advise about a directory traversal
flaw in libsoup's SoupServer. This flaw could allow any service linked
to libsoup and using SoupServer to have a remote user traverse the local
file system and expose unintended files.
References:
https://bugzilla.redhat.com/show_bug.cgi?id=720509
https://bugzilla.gnome.org/show_bug.cgi?id=653258
http://git.gnome.org/browse/libsoup/commit/?id=cbeeb7a0f7f0e8b16f2d382157496f9100218dea
http://git.gnome.org/browse/libsoup/commit/?h=gnome-3-0&id=51eb8798c3965b49f3010db82009d36429f28514
--
Vincent Danen / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
