CVE-2009-3045

Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.opera.com/docs/changelogs/mac/1000/
http://www.opera.com/docs/changelogs/freebsd/1000/
http://www.opera.com/docs/changelogs/windows/1000/
http://www.opera.com/support/kb/view/933/	Vendor Advisory
http://www.opera.com/docs/changelogs/linux/1000/
http://www.opera.com/docs/changelogs/solaris/1000/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:opera:opera_browser:8.0:::::::*
	cpe:2.3:a:opera:opera_browser:7.0:::::::*
	cpe:2.3:a:opera:opera_browser:7.23:::::::*
	cpe:2.3:a:opera:opera_browser:9.01:::::::*
	cpe:2.3:a:opera:opera_browser:9.51:::::::*
	cpe:2.3:a:opera:opera_browser:9.21:::::::*
	cpe:2.3:a:opera:opera_browser:7.60:::::::*
	cpe:2.3:a:opera:opera_browser:8.02:::::::*
	cpe:2.3:a:opera:opera_browser:9.02:::::::*
	cpe:2.3:a:opera:opera_browser:9.22:::::::*
	cpe:2.3:a:opera:opera_browser:9.20:::::::*
	cpe:2.3:a:opera:opera_browser:7.53:::::::*
	cpe:2.3:a:opera:opera_browser:8.50:::::::*
	cpe:2.3:a:opera:opera_browser:8.53:::::::*
	cpe:2.3:a:opera:opera_browser:9.12:::::::*
	cpe:2.3:a:opera:opera_browser:8.54:::::::*
	cpe:2.3:a:opera:opera_browser:8.51:::::::*
	cpe:2.3:a:opera:opera_browser:9.64:::::::*
	cpe:2.3:a:opera:opera_browser:7.54:::::::*
	cpe:2.3:a:opera:opera_browser:9.0:::::::*
	cpe:2.3:a:opera:opera_browser:9.10:::::::*
	cpe:2.3:a:opera:opera_browser::beta_3::::::*
	cpe:2.3:a:opera:opera_browser:8.52:::::::*
	cpe:2.3:a:opera:opera_browser:8.01:::::::*
	cpe:2.3:a:opera:opera_browser:9.52:::::::*

Information

Published : 2009-09-02 10:30

Updated : 2018-10-30 09:26

NVD link : CVE-2009-3045

Mitre link : CVE-2009-3045

JSON object : View

CWE

CWE-310

Cryptographic Issues

Advertisement

Products Affected

opera

opera_browser

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.opera.com/docs/changelogs/mac/1000/", "name": "http://www.opera.com/docs/changelogs/mac/1000/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/freebsd/1000/", "name": "http://www.opera.com/docs/changelogs/freebsd/1000/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/windows/1000/", "name": "http://www.opera.com/docs/changelogs/windows/1000/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/support/kb/view/933/", "name": "http://www.opera.com/support/kb/view/933/", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/linux/1000/", "name": "http://www.opera.com/docs/changelogs/linux/1000/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/solaris/1000/", "name": "http://www.opera.com/docs/changelogs/solaris/1000/", "tags": [], "refsource": "CONFIRM"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442", "name": "oval:org.mitre.oval:def:6442", "tags": [], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-310"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-3045", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-09-02T17:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "10.00"}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-30T16:26Z"}