NVD

Id
57352  
Name
CVE-2007-5276  
Description
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2008-11-15  
Seq
2007-5276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293083 57352 CVE-2007-5276 http://crypto.stanford.edu/dns/dns-rebinding.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55790 JVNDB-2007-004482 Opera における DNS リバインディング攻撃を実行される脆弱性 Opera は、不適切な TCP ポートへの接続の失敗に基に DNS の pin を投下するため、DNS リバインディング攻撃を実行される脆弱性が存在します。 CVE-2007-5276 28631 CVE-2007-5276 57352 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004482.html 2007-10-08 2012-09-25 View