CVE-2012-4511

MediumCVSS 5.8/10Last modified Jun 16, 2026

Description

services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.

Metrics

CVSS 2.0 5.8/10AV:N/AC:M/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db5529020652cee3700c75341625503Issue Tracking, Patch
http://www.openwall.com/lists/oss-security/2012/10/10/10Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/11/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/23/5Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=863206Issue Tracking
http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db5529020652cee3700c75341625503Issue Tracking, Patch
http://www.openwall.com/lists/oss-security/2012/10/10/10Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/11/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/10/23/5Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=863206Issue Tracking

Timeline

Published: Oct 22, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-45128.8The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly CVE-2012-45136.4khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read mem CVE-2012-45145.0rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc CVE-2012-45156.8Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote CVE-2012-45165.8librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution i CVE-2012-45175.0ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of s CVE-2012-45183.6ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.CVE-2012-45196.1Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.CVE-2012-45206.4The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and di CVE-2012-45225.0The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers CVE-2012-45236.4radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to th CVE-2012-45247.5xlockmore before 5.43 'dclock' security bypass vulnerability