CVE-2012-4511: Infoleak
First published: Thu Oct 04 2012(Updated: )
Description of problem: Whenever I connect to the Internet I see libsocialweb establishing a connection with 68.142.214.24 (flickr server). I do not have a flickr account. Version-Release number of selected component (if applicable): libsocialweb-0.25.20-1.fc16.i686 libsocialweb-keys-0.25.20-1.fc16.noarch How reproducible: Always Steps to Reproduce: 1. disconnect network 2. reconnect 3. run sudo netstat -tanp | grep libsocialweb Actual results: netstat shows the following connection: tcp 0 0 10.51.249.72:52028 68.142.214.24:80 ESTABLISHED 1617/libsocialweb-c Expected results: No connections with flickr servers. Additional info: Kernel: 3.4.11-1.fc16.i686.PAE 68.142.214.24 is www.flickr.mud.yahoo.com process 1617 is /usr/libexec/libsocialweb-core I captured two packets with wireshark: 1 3.574207 10.50.122.13 68.142.214.24 HTTP GET /services/rest/?method=flickr%2Eauth%2EcheckToken&api%5Fsig=b4182f2f96c74c51ce141ae71c5555d3&api%5Fkey=d7953dc63a9498433bfdb4287ee2694b HTTP/1.1 Host: api.flickr.com Connection: Keep-Alive 2 5.198500 68.142.214.24 10.50.122.13 HTTP/XML HTTP/1.1 200 OK Date: Thu, 04 Oct 2012 15:12:54 GMT P3P: policyref="<a href="http://info.yahoo.com/w3c/p3p.xml">http://info.yahoo.com/w3c/p3p.xml</a>", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Content-Length: 109 Cache-Control: private X-Served-By: www166.flickr.mud.yahoo.com Vary: Accept-Encoding Content-Type: text/xml; charset=utf-8 Connection: keep-alive <?xml version="1.0" encoding="utf-8" ?> <rsp stat="fail"> <err code="98" msg="Invalid auth token" /> </rsp>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gnome Libsocialweb | <=0.25.20 | |
| Gnome Libsocialweb | =0.25.0 | |
| Gnome Libsocialweb | =0.25.1 | |
| Gnome Libsocialweb | =0.25.2 | |
| Gnome Libsocialweb | =0.25.3 | |
| Gnome Libsocialweb | =0.25.4 | |
| Gnome Libsocialweb | =0.25.5 | |
| Gnome Libsocialweb | =0.25.6 | |
| Gnome Libsocialweb | =0.25.7 | |
| Gnome Libsocialweb | =0.25.8 | |
| Gnome Libsocialweb | =0.25.9 | |
| Gnome Libsocialweb | =0.25.10 | |
| Gnome Libsocialweb | =0.25.11 | |
| Gnome Libsocialweb | =0.25.12 | |
| Gnome Libsocialweb | =0.25.13 | |
| Gnome Libsocialweb | =0.25.14 | |
| Gnome Libsocialweb | =0.25.15 | |
| Gnome Libsocialweb | =0.25.16 | |
| Gnome Libsocialweb | =0.25.17 | |
| Gnome Libsocialweb | =0.25.18 | |
| Gnome Libsocialweb | =0.25.19 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db5529020652cee3700c75341625503
- http://www.openwall.com/lists/oss-security/2012/10/10/10
- http://www.openwall.com/lists/oss-security/2012/10/11/1
- http://www.openwall.com/lists/oss-security/2012/10/23/5
- https://bugzilla.redhat.com/show_bug.cgi?id=863206
- http://info.yahoo.com/w3c/p3p.xml
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=752022#c10
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=865126
- https://access.redhat.com/security/cve/CVE-2012-4511
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=863206#c6
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- collector/redhat-bugzilla
- alias/CVE-2012-4511
- vendor/gnome
- canonical/gnome libsocialweb
- version/gnome libsocialweb/0.25.20
- version/gnome libsocialweb/0.25.0
- version/gnome libsocialweb/0.25.1
- version/gnome libsocialweb/0.25.2
- version/gnome libsocialweb/0.25.3
- version/gnome libsocialweb/0.25.4
- version/gnome libsocialweb/0.25.5
- version/gnome libsocialweb/0.25.6
- version/gnome libsocialweb/0.25.7
- version/gnome libsocialweb/0.25.8
- version/gnome libsocialweb/0.25.9
- version/gnome libsocialweb/0.25.10
- version/gnome libsocialweb/0.25.11
- version/gnome libsocialweb/0.25.12
- version/gnome libsocialweb/0.25.13
- version/gnome libsocialweb/0.25.14
- version/gnome libsocialweb/0.25.15
- version/gnome libsocialweb/0.25.16
- version/gnome libsocialweb/0.25.17
- version/gnome libsocialweb/0.25.18
- version/gnome libsocialweb/0.25.19