Unrated severityNVD Advisory· Published Oct 22, 2012· Updated Apr 29, 2026
CVE-2011-4129
CVE-2011-4129
Description
(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.
Affected products
20cpe:2.3:a:gnome:libsocialweb:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:gnome:libsocialweb:*:*:*:*:*:*:*:*range: <=0.25.19
- cpe:2.3:a:gnome:libsocialweb:0.25.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.10:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.11:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.12:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.13:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.14:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.15:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.16:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.17:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.18:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.7:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.8:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:libsocialweb:0.25.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- git.gnome.org/browse/libsocialweb/commit/nvdIssue TrackingPatch
- git.gnome.org/browse/libsocialweb/commit/nvdIssue TrackingPatch
- www.openwall.com/lists/oss-security/2011/11/09/3nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2011/11/09/5nvdMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.