Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2011-4091
HistoryFeb 10, 2014 - 6:15 p.m.

CVE-2011-4091

2014-02-1018:15:09
CWE-287
redhat
web.nvd.nist.gov
34
cve-2011-4091
libobby server
libnet6
remote attackers
sensitive information
nvd
authentication
server-usage patterns

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

64.9%

JSON

The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.

Affected configurations

Nvd
Node
opensuseopensuseMatch11.3
OR
opensuseopensuseMatch11.4
Node
oraclesolarisMatch11.2
Node
armin_burgmeiernet6Range≤1.3.13
OR
armin_burgmeiernet6Match1.3.1
OR
armin_burgmeiernet6Match1.3.2
OR
armin_burgmeiernet6Match1.3.3
OR
armin_burgmeiernet6Match1.3.4
OR
armin_burgmeiernet6Match1.3.5
OR
armin_burgmeiernet6Match1.3.6
OR
armin_burgmeiernet6Match1.3.7
OR
armin_burgmeiernet6Match1.3.8
OR
armin_burgmeiernet6Match1.3.9
OR
armin_burgmeiernet6Match1.3.10
OR
armin_burgmeiernet6Match1.3.11
OR
armin_burgmeiernet6Match1.3.12
VendorProductVersionCPE
opensuseopensuse11.3cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
opensuseopensuse11.4cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
oraclesolaris11.2cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*
armin_burgmeiernet6*cpe:2.3:a:armin_burgmeier:net6:*:*:*:*:*:*:*:*
armin_burgmeiernet61.3.1cpe:2.3:a:armin_burgmeier:net6:1.3.1:*:*:*:*:*:*:*
armin_burgmeiernet61.3.2cpe:2.3:a:armin_burgmeier:net6:1.3.2:*:*:*:*:*:*:*
armin_burgmeiernet61.3.3cpe:2.3:a:armin_burgmeier:net6:1.3.3:*:*:*:*:*:*:*
armin_burgmeiernet61.3.4cpe:2.3:a:armin_burgmeier:net6:1.3.4:*:*:*:*:*:*:*
armin_burgmeiernet61.3.5cpe:2.3:a:armin_burgmeier:net6:1.3.5:*:*:*:*:*:*:*
armin_burgmeiernet61.3.6cpe:2.3:a:armin_burgmeier:net6:1.3.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 161

Related

cvelist 1
ubuntucve 1
prion 1
nvd 1
openvas 6
nessus 6
fedora 3
cvelist
cvelist
CVE-2011-4091
2014-02-10 17:00:00
ubuntucve
ubuntucve
CVE-2011-4091
2014-02-10 00:00:00
prion
prion
Authentication flaw
2014-02-10 18:15:00
nvd
nvd
CVE-2011-4091
2014-02-10 18:15:09
openvas
openvas
Fedora Update for net6 FEDORA-2011-15332
2011-11-25 00:00:00
Fedora Update for net6 FEDORA-2011-15332
2011-11-25 00:00:00
Fedora Update for net6 FEDORA-2011-15326
2011-11-25 00:00:00
nessus
nessus
openSUSE Security Update : net6 (openSUSE-2012-19)
2014-06-13 00:00:00
openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)
2014-06-13 00:00:00
openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: net6-1.3.14-1.fc14
2011-11-25 02:12:34
[SECURITY] Fedora 15 Update: net6-1.3.14-1.fc15
2011-11-25 02:16:58
[SECURITY] Fedora 16 Update: net6-1.3.14-1.fc16
2011-11-25 02:04:57

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

64.9%

JSON
Related for CVE-2011-4091
cvelist1ubuntucve1prion1nvd1openvas6nessus6fedora3