Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2009-3045

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2009-3045
Last Modified 21 Aug 2010 01:35:05
Published 02 Sep 2009 01:30:01
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2009-3045

Summary

Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate.

Vulnerable Systems

Application

  • Opera Browser 10.00

  • Opera Browser 7.0

  • Opera Browser 7.23

  • Opera Browser 7.53

  • Opera Browser 7.54

  • Opera Browser 7.60

  • Opera Browser 8.0

  • Opera Browser 8.00

  • Opera Browser 8.01

  • Opera Browser 8.02

  • Opera Browser 8.50

  • Opera Browser 8.51

  • Opera Browser 8.52

  • Opera Browser 8.53

  • Opera Browser 8.54

  • Opera Browser 9.0

  • Opera Browser 9.00

  • Opera Browser 9.01

  • Opera Browser 9.02

  • Opera Browser 9.10

  • Opera Browser 9.12

  • Opera Browser 9.20

  • Opera Browser 9.21

  • Opera Browser 9.22

  • Opera Browser 9.51

  • Opera Browser 9.52

  • Opera Browser 9.64


References

CONFIRM - http://www.opera.com/support/kb/view/933/

CONFIRM - http://www.opera.com/docs/changelogs/windows/1000/

CONFIRM - http://www.opera.com/docs/changelogs/solaris/1000/

CONFIRM - http://www.opera.com/docs/changelogs/mac/1000/

CONFIRM - http://www.opera.com/docs/changelogs/linux/1000/

CONFIRM - http://www.opera.com/docs/changelogs/freebsd/1000/


Last Updated: 27 May 2016 10:51:07