NVD

Id
10619  
Name
CVE-2011-4091  
Description
The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2014-02-10  
Modified Date
2016-11-18  
Seq
2011-4091  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60009 10619 CVE-2011-4091 http://git.0x539.de/?p=net6.git;a=commitdiff;h=84afca022f063f89bfcd4bb32b1ee911f555abf1;hp=ac61d7fb42a1f977fb527e024bede319c4a9e169  View
60010 10619 CVE-2011-4091 openSUSE-SU-2012:0008  View
60011 10619 CVE-2011-4091 openSUSE-SU-2012:0040  View
60012 10619 CVE-2011-4091 [oss-security] 20111031 Re: CVE request: 3 flaws in libobby and libnet6  View
60013 10619 CVE-2011-4091 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
60014 10619 CVE-2011-4091 https://bugzilla.novell.com/show_bug.cgi?id=727708  View
60015 10619 CVE-2011-4091 https://bugzilla.redhat.com/show_bug.cgi?id=750632  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35031 JVNDB-2011-005273 libnet6 の inc/server.hpp の libobby サーバにおける重要な情報を取得される脆弱性 libnet6 (別名 net6) の inc/server.hpp の libobby サーバは、ユーザ名の確認の前に認証を実行しないため、特定のユーザや色の好みによるサーバの利用パターンなどの重要な情報を取得される脆弱性が存在します。 CVE-2011-4091 51998 CVE-2011-4091 10619 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005273.html 2011-10-30 2015-06-19 View