Opera Web Browser Unspecified Certificate Verification Vulnerability
BID:10764
Info
Opera Web Browser Unspecified Certificate Verification Vulnerability
| Bugtraq ID: | 10764 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 20 2004 12:00AM |
| Updated: | Jul 20 2004 12:00AM |
| Credit: | This issue was disclosed in the vendor change log. |
| Vulnerable: |
Opera Software Opera Web Browser 7.51 Opera Software Opera Web Browser 7.50 |
| Not Vulnerable: |
Opera Software Opera Web Browser 7.53 Opera Software Opera Web Browser 7.52 |
Discussion
Opera Web Browser Unspecified Certificate Verification Vulnerability
Opera Web Browser is reported prone to an unspecified certificate verification vulnerability. This issue may allow improper certificates to be used when authenticating connections. An attacker may use forged certificates to carry out various attacks.
It is conjectured that a malicious Web site could take advantage of this by posing as a site that may be trusted. Users may believe a malicious site is trusted as a result. This could lead to the user taking further actions under the assumption the site is trusted, such as authenticating or submitting sensitive or private information.
Further information about this issue and its impacts are not currently available. This BID will be updated as more information becomes available.
Opera versions 7.51 and prior are affected by this issue.
Opera Web Browser is reported prone to an unspecified certificate verification vulnerability. This issue may allow improper certificates to be used when authenticating connections. An attacker may use forged certificates to carry out various attacks.
It is conjectured that a malicious Web site could take advantage of this by posing as a site that may be trusted. Users may believe a malicious site is trusted as a result. This could lead to the user taking further actions under the assumption the site is trusted, such as authenticating or submitting sensitive or private information.
Further information about this issue and its impacts are not currently available. This BID will be updated as more information becomes available.
Opera versions 7.51 and prior are affected by this issue.
Exploit / POC
Opera Web Browser Unspecified Certificate Verification Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Opera Web Browser Unspecified Certificate Verification Vulnerability
Solution:
Opera version 7.52 and 7.53 are not vulnerable to this issue.
Gentoo has released an advisory (GLSA 200407-15) to address this and other issues in Opera. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to upgrade their computers:
emerge sync
emerge -pv ">=net-www/opera-7.53"
emerge ">=net-www/opera-7.53"
Gentoo has released a second advisory GLSA 200408-05 dealing with this issue. All Opera users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-www/opera-7.54"
# emerge ">=net-www/opera-7.54"
Please see the referenced Gentoo advisory for more information.
Opera Software Opera Web Browser 7.50
Opera Software Opera Web Browser 7.51
Solution:
Opera version 7.52 and 7.53 are not vulnerable to this issue.
Gentoo has released an advisory (GLSA 200407-15) to address this and other issues in Opera. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to upgrade their computers:
emerge sync
emerge -pv ">=net-www/opera-7.53"
emerge ">=net-www/opera-7.53"
Gentoo has released a second advisory GLSA 200408-05 dealing with this issue. All Opera users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-www/opera-7.54"
# emerge ">=net-www/opera-7.54"
Please see the referenced Gentoo advisory for more information.
Opera Software Opera Web Browser 7.50
-
Opera Software Opera 7.53
http://www.opera.com/download/
Opera Software Opera Web Browser 7.51
-
Opera Software Opera 7.53
http://www.opera.com/download/
References
Opera Web Browser Unspecified Certificate Verification Vulnerability
References:
References:
- Opera 7.52 change log (Opera Software)
- Opera Web Browser Home Page (Opera Software)