NVD

Id
9138  
Name
CVE-2011-2344  
Description
Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-08  
Modified Date
2011-07-08  
Seq
2011-2344  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52140 9138 CVE-2011-2344 http://android.git.kernel.org/?p=platform/packages/apps/Gallery3D.git;a=commit;h=7a763db1c15bb6436be85a3f23382e4171970b6e  View
52141 9138 CVE-2011-2344 http://android.git.kernel.org/?p=platform/packages/apps/Gallery3D.git;a=commit;h=9a418de454e5ce078c98f41b5c18e3bb9175bd20  View
52142 9138 CVE-2011-2344 http://www.uni-ulm.de/en/in/mi/staff/koenings/catching-authtokens.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32708 JVNDB-2011-002948 Android Picasa における picasaweb.google.com との接続からトークンを傍受される脆弱性 Android Picasa には、picasaweb.google.com との接続からトークンを傍受されることで権限を取得され、非公開の写真および Web アルバムにアクセスされる脆弱性が存在します。 CVE-2011-2344 50251 CVE-2011-2344 9138 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002948.html 2011-07-08 2011-11-21 View