CVE-2012-1177
- State
- Published
- Severity
- Not scored
- Published
- Aug 26, 2012
- Updated
- Aug 6, 2024
- Reserved
- Feb 14, 2012
Description
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://git.gnome.org/browse/libgdata/commit/?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c
- https://bugzilla.novell.com/show_bug.cgi?id=752088
- [oss-security] 20120314 Re: CVE Request: libgdata did not verify SSL certificatesmailing-list
- [oss-security] 20120314 CVE Request: libgdata did not verify SSL certificatesmailing-list
- DSA-2482vendor-advisory
- MDVSA-2012:111vendor-advisory
- https://bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812
- https://bugzilla.gnome.org/show_bug.cgi?id=671535
- http://git.gnome.org/browse/libgdata/commit/?id=6799f2c525a584dc998821a6ce897e463dad7840
- [oss-security] 20120314 Re: CVE Request: libgdata did not verify SSL certificatesmailing-list
- 50432third-party-advisory
- USN-1547-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.