CVE-2011-4129

Published: Oct 22, 2012Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.

Affected (20)

Products: Gnome: Libsocialweb

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Gnome Libsocialweb	Up to 0.25.19
Gnome Libsocialweb	Version 0.25.0
Gnome Libsocialweb	Version 0.25.10
Gnome Libsocialweb	Version 0.25.11
Gnome Libsocialweb	Version 0.25.12
Gnome Libsocialweb	Version 0.25.13
Gnome Libsocialweb	Version 0.25.14
Gnome Libsocialweb	Version 0.25.15
Gnome Libsocialweb	Version 0.25.16
Gnome Libsocialweb	Version 0.25.17
Gnome Libsocialweb	Version 0.25.18
Gnome Libsocialweb	Version 0.25.1
Gnome Libsocialweb	Version 0.25.2
Gnome Libsocialweb	Version 0.25.3
Gnome Libsocialweb	Version 0.25.4
Gnome Libsocialweb	Version 0.25.5
Gnome Libsocialweb	Version 0.25.6
Gnome Libsocialweb	Version 0.25.7
Gnome Libsocialweb	Version 0.25.8
Gnome Libsocialweb	Version 0.25.9

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94

Source: secalert@redhat.com

Issue TrackingPatch

http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5bec

Source: secalert@redhat.com

Issue TrackingPatch

http://www.openwall.com/lists/oss-security/2011/11/09/3

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/11/09/5

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=752022

Source: secalert@redhat.com

Issue Tracking

http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5bec

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

http://www.openwall.com/lists/oss-security/2011/11/09/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/11/09/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=752022

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

Timeline

No history available yet.