Opera Web Browser Information Disclosure Vulnerability

Bugtraq ID:	49388
Class:	Unknown
CVE:	CVE-2011-3388
Remote:	Yes
Local:	No
Published:	Aug 31 2011 12:00AM
Updated:	Mar 19 2015 08:33AM
Credit:	<br>Roland Reck
Vulnerable:	Sun Solaris 11 Sun Solaris 10 RedHat Enterprise Linux WS Extras 4 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux AS Extras 4 RedHat Desktop Extras 4 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0 2 Opera Software Opera Web Browser 8.0 1 Opera Software Opera Web Browser 7.54 Opera Software Opera Web Browser 7.53 Opera Software Opera Web Browser 7.52 Opera Software Opera Web Browser 7.51 Opera Software Opera Web Browser 7.50 Opera Software Opera Web Browser 7.23 Opera Software Opera Web Browser 7.22 Opera Software Opera Web Browser 7.21 Opera Software Opera Web Browser 7.20 Opera Software Opera Web Browser 7.11 Opera Software Opera Web Browser 7.10 Opera Software Opera Web Browser 6.0.1 Opera Software Opera Web Browser 6.0 Opera Software Opera Web Browser 5.12 Opera Software Opera Web Browser 9.64 Opera Software Opera Web Browser 9.63 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9 Opera Software Opera Web Browser 8.54 Opera Software Opera Web Browser 8.53 Opera Software Opera Web Browser 8.52 Opera Software Opera Web Browser 8 Beta 3 Opera Software Opera Web Browser 11.50 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.10 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.61 Opera Software Opera Web Browser 10.60 Beta1 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.53 B Opera Software Opera Web Browser 10.53 Opera Software Opera Web Browser 10.52 Opera Software Opera Web Browser 10.51 Opera Software Opera Web Browser 10.50 Beta2 Opera Software Opera Web Browser 10.50 Beta1 Opera Software Opera Web Browser 10.50 Opera Software Opera Web Browser 10.10 Beta1 Opera Software Opera Web Browser 10.10 Opera Software Opera Web Browser 10.1 Opera Software Opera Web Browser 10.01 Opera Software Opera Web Browser 10.00 Beta3 Opera Software Opera Web Browser 10.00 Beta2 Opera Software Opera Web Browser 10.00 Beta1 Opera Software Opera Web Browser 10.00 Opera Software Opera Web Browser 10 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 IBM Rational Policy Tester 8.5.0.1 IBM Rational Policy Tester 8.5 IBM Rational AppScan Standard 8.0.0.3 IBM Rational AppScan Standard 8.0.0 IBM Rational AppScan Standard 7.8 IBM Rational AppScan Enterprise 8.5.0.1 IBM Rational AppScan Enterprise 8.0.1.1 IBM Rational AppScan Enterprise 8.0.1 IBM Rational AppScan Enterprise 8.0.0.1 IBM Rational AppScan Enterprise 8.0.0 HP System Management Homepage 7.0 HP NonStop Server J06.13 HP NonStop Server J06.12.00 HP NonStop Server J06.11.01 HP NonStop Server J06.11.00 HP NonStop Server J06.10.02 HP NonStop Server J06.10.01 HP NonStop Server J06.10.00 HP NonStop Server J06.09.04 HP NonStop Server J06.09.03 HP NonStop Server J06.09.02 HP NonStop Server J06.09.01 HP NonStop Server J06.09.00 HP NonStop Server J06.08.04 HP NonStop Server J06.08.03 HP NonStop Server J06.08.02 HP NonStop Server J06.08.01 HP NonStop Server J06.08.00 HP NonStop Server J06.07.02 HP NonStop Server J06.07.01 HP NonStop Server J06.07.00 HP NonStop Server J06.06.03 HP NonStop Server J06.06.02 HP NonStop Server J06.06.01 HP NonStop Server J06.06.00 HP NonStop Server J06.05.02 HP NonStop Server J06.05.01 HP NonStop Server J06.05.00 HP NonStop Server J06.04.02 HP NonStop Server J06.04.01 HP NonStop Server J06.04.00 HP NonStop Server H06.24 HP NonStop Server H06.23 HP NonStop Server H06.22.01 HP NonStop Server H06.22.00 HP NonStop Server H06.21.02 HP NonStop Server H06.21.01 HP NonStop Server H06.21.00 HP NonStop Server H06.20.03 HP NonStop Server H06.20.02 HP NonStop Server H06.20.01 HP NonStop Server H06.20.00 HP NonStop Server H06.19.03 HP NonStop Server H06.19.02 HP NonStop Server H06.19.01 HP NonStop Server H06.19.00 HP NonStop Server H06.18.02 HP NonStop Server H06.18.01 HP NonStop Server H06.18.00 HP NonStop Server H06.17.03 HP NonStop Server H06.17.02 HP NonStop Server H06.17.01 HP NonStop Server H06.17.00 HP NonStop Server H06.16.02 HP NonStop Server H06.16.01 HP NonStop Server H06.16.00 HP NonStop Server H06.15.02 HP NonStop Server H06.15.01 HP NonStop Server H06.15.00 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Opera Software Opera Web Browser 11.51

Opera Web Browser Information Disclosure Vulnerability

The Opera Web Browser is prone to an information-disclosure vulnerability.

An attacker can exploit the information-disclosure issue to gain access to security information.

Versions prior to Opera 11.51 are vulnerable.

UPDATE: Information regarding the unspecified issue has been removed. That issue is discussed in BID 49778 (SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability).

Opera Web Browser Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Opera Web Browser Information Disclosure Vulnerability

Solution:
The vendor released an update. Please see the references for details.


MandrakeSoft Enterprise Server 5

• Mandriva libpython2.5-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpython2.5-devel-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-base-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-docs-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-apps-2.5.2-5.12mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Opera Web Browser Information Disclosure Vulnerability

References:

• Multiple vulnerabilities in Python (Oracle)
  
• Opera 11.51 Release Notes (Opera Software)
  
• Opera 11.51 Security Advisory (Opera Software)
  
• Opera Homepage (Opera Software)
  
• HPSBMU02900 rev.1 - HP System Management Homepage (SMH) running on Linux and Win (HP)
  
• HPSBNS02920 rev.1 - HP NonStop Servers Multiple Remote Vulnerabilities (HP)
  
• Potential Security Vulnerabilities in Oracle Java 5 SDK affecting IBM WebSphere (\IBM)
  
• Security Bulletin: Vulnerabilities in AppScan Enterprise and Policy Tester (IBM)
  
• Security Bulletin: Vulnerabilities in AppScan Standard (IBM)
  
• Xerox Security Bulletin XRX13-007 (Xerox)