CVE-2012-4511

services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.

• CWE-200

• http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db5529020652cee3700c75341625503Issue Tracking, Patch
• http://www.openwall.com/lists/oss-security/2012/10/10/10Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/11/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/23/5Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=863206Issue Tracking
• http://git.gnome.org/browse/libsocialweb/commit/?id=8c28ae1d5db5529020652cee3700c75341625503Issue Tracking, Patch
• http://www.openwall.com/lists/oss-security/2012/10/10/10Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/11/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/23/5Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=863206Issue Tracking

Published

Oct 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4505Heap-based buffer overflow in the px_pac_reload function in …
• CVE-2012-4506Directory traversal vulnerability in gitolite 3.x before 3.1…
• CVE-2012-4507The strchr function in procmime.c in Claws Mail (aka claws-m…
• CVE-2012-4508Race condition in fs/ext4/extents.c in the Linux kernel befo…
• CVE-2012-4509Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-4510cups-pk-helper before 0.2.3 does not properly wrap the (1) c…
• CVE-2012-4512The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE…8.8
• CVE-2012-4513khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 al…
• CVE-2012-4514rendering/render_replaced.cpp in Konqueror in KDE before 4.9…
• CVE-2012-4515Use-after-free vulnerability in khtml/rendering/render_repla…
• CVE-2012-4516librdmacm 1.0.16, when ibacm.port is not specified, connects…
• CVE-2012-4517ibacm before 1.0.6 does not properly manage reference counts…