CVE-2011-4129

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-10-22 · updated 2026-06-16
Weakness: CWE-200

Description

(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.

Affected products

GNOME Libsocialweb: through 0.25.19; 0.25.0, 0.25.1, 0.25.2, 0.25.3, 0.25.4, 0.25.5 (+13)

References

http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94
http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5bec
http://www.openwall.com/lists/oss-security/2011/11/09/3
http://www.openwall.com/lists/oss-security/2011/11/09/5
https://bugzilla.redhat.com/show_bug.cgi?id=752022
http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94
http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5bec
http://www.openwall.com/lists/oss-security/2011/11/09/3
http://www.openwall.com/lists/oss-security/2011/11/09/5
https://bugzilla.redhat.com/show_bug.cgi?id=752022

Get alerted when CVE-2011-4129 or the next vulnerability affects your stack