CVE

Id
19435  
CVE No.
CVE-2006-3331  
Status
Candidate  
Description
Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.  
Phase
Assigned (20060630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
174448 19435 CVE-2006-3331 BUGTRAQ:20060628 Secunia Research: Opera SSL Certificate "Stealing" Weakness  View
174449 19435 CVE-2006-3331 URL:http://www.securityfocus.com/archive/1/archive/1/438634/100/0/threaded  View
174450 19435 CVE-2006-3331 MISC:http://secunia.com/secunia_research/2006-49/advisory/  View
174451 19435 CVE-2006-3331 SUSE:SUSE-SA:2006:038  View
174452 19435 CVE-2006-3331 URL:http://www.novell.com/linux/security/advisories/2006_38_opera.html  View
174453 19435 CVE-2006-3331 BID:18692  View
174454 19435 CVE-2006-3331 URL:http://www.securityfocus.com/bid/18692  View
174455 19435 CVE-2006-3331 VUPEN:ADV-2006-2571  View
174456 19435 CVE-2006-3331 URL:http://www.vupen.com/english/advisories/2006/2571  View
174457 19435 CVE-2006-3331 SECTRACK:1016406  View
174458 19435 CVE-2006-3331 URL:http://securitytracker.com/id?1016406  View
174459 19435 CVE-2006-3331 SECUNIA:19480  View
174460 19435 CVE-2006-3331 URL:http://secunia.com/advisories/19480  View
174461 19435 CVE-2006-3331 SECUNIA:20897  View
174462 19435 CVE-2006-3331 URL:http://secunia.com/advisories/20897  View
174463 19435 CVE-2006-3331 SREASON:1177  View
174464 19435 CVE-2006-3331 URL:http://securityreason.com/securityalert/1177  View
174465 19435 CVE-2006-3331 XF:opera-ssl-certificate-hijacking(27449)  View

Related JVN