CVE-2011-4091: Armin Burgmeier NET6

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences.

Affected products

• Armin Burgmeier NET6: up to and including 1.3.13; version 1.3.1 only; version 1.3.2 only; version 1.3.3 only; version 1.3.4 only; version 1.3.5 only; …
• Opensuse Opensuse: version 11.3 only; version 11.4 only
• Oracle Solaris: version 11.2 only

Published 2014-02-10. Last modified 2026-06-16.