CVE-2012-1177
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows...
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
Exploit likelihood
What each source reports
NVD Score used
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
CVE-2012-1177- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
CVE-2012-1177- Updated
- 2026-11-02
EUVDEUVD-2012-1206 No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
EUVD-2012-1206- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fhp4-5rwr-h9r6 No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows...
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
GHSA-fhp4-5rwr-h9r6- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
CVE-2012-1177- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1177 No score
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
- Record
DEBIAN-CVE-2012-1177- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1177 is a medium vulnerability (CVSS 5.1) in Gnome Libgdata, published May 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. Fixed in libgdata 0.10.2-1.
References
git.gnome.org/browse/libgdata/commit?h=libgdata-0-10&id=8eff8fa9138859e03e58c2aa76600ab63eb5c29c
bugzilla.novell.com/show_bug.cgi?id=752088
openwall.com/lists/oss-security/2012/03/14/8
debian.org/security/2012/dsa-2482
mandriva.com/security/advisories?name=MDVSA-2012:111
Show 9 moreShow less
bugs.launchpad.net/ubuntu/+source/libgdata/+bug/938812
bugzilla.gnome.org/show_bug.cgi?id=671535
secunia.com/advisories/50432
ubuntu.com/usn/USN-1547-1
nvd.nist.gov/vuln/detail/CVE-2012-1177
github.com/advisories/GHSA-fhp4-5rwr-h9r6
security-tracker.debian.org/tracker/CVE-2012-1177