CVE-2012-1177

Published: Aug 26, 2012Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.

Affected (2)

Products: Gnome: Libgdata

Gnome

1 product

Libgdata

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnome Libgdata	Up to 0.10.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Gnome Libgdata	Up to 0.11.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c

Source: secalert@redhat.com

http://git.gnome.org/browse/libgdata/commit/?id=6799f2c525a584dc998821a6ce897e463dad7840

Source: secalert@redhat.com

http://secunia.com/advisories/50432

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2482

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2012:111

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/14/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/14/3

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/14/8

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1547-1

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812

Source: secalert@redhat.com

https://bugzilla.gnome.org/show_bug.cgi?id=671535

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=752088

Source: secalert@redhat.com

http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c