CVE:CVE-2011-2524
CNNVD:CNNVD-201107-455
libsoup 2.35.4之前版本的SoupServer中的soup-uri.c没有对用户提供的数据进行充分过滤，导致存在目录遍历漏洞。远程攻击者可借助URI中的%2e%2e（编码点点）读取web服务器上下文中的任意本地文件。
solution:Upgrade gnome libsoup to a higher version than 2.35.3,2.0,2.2,2.2.0,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.6.1,2.2.7,2.2.91,2.2.92,2.2.93,2.2.94,2.2.95.1,2.2.96,2.2.97,2.2.98,2.2.99,2.2.100,2.2.101,2.2.102,2.2.103,2.2.104,2.3.0.1,2.3.2,2.3.4,2.4.0,2.4.1,2.23.1,2.23.6,2.23.91,2.23.92,2.24.0.1,2.24.1,2.25.2,2.25.3,2.25.4,2.25.5,2.25.91,2.26.0,2.26.1,2.27.1,2.27.2,2.27.4,2.27.5,2.27.90,2.27.91,2.27.92,2.28.0,2.28.1,2.29.3,2.29.5,2.29.6,2.29.90,2.29.91,2.30.0,2.30.1,2.31.2,2.31.6,2.31.90,2.31.92,2.32.0,2.32.1,2.32.2,2.33.4,2.33.5,2.33.6,2.33.90,2.33.92,2.34.0,2.34.1,and avoid the version (,2.35.3],2.0,2.2,2.2.0,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.6.1,2.2.7,2.2.91,2.2.92,2.2.93,2.2.94,2.2.95.1,2.2.96,2.2.97,2.2.98,2.2.99,2.2.100,2.2.101,2.2.102,2.2.103,2.2.104,2.3.0.1,2.3.2,2.3.4,2.4.0,2.4.1,2.23.1,2.23.6,2.23.91,2.23.92,2.24.0.1,2.24.1,2.25.2,2.25.3,2.25.4,2.25.5,2.25.91,2.26.0,2.26.1,2.27.1,2.27.2,2.27.4,2.27.5,2.27.90,2.27.91,2.27.92,2.28.0,2.28.1,2.29.3,2.29.5,2.29.6,2.29.90,2.29.91,2.30.0,2.30.1,2.31.2,2.31.6,2.31.90,2.31.92,2.32.0,2.32.1,2.32.2,2.33.4,2.33.5,2.33.6,2.33.90,2.33.92,2.34.0,2.34.1