Vulnerability Description
Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opera | Opera Browser | 8.0 |
References
- http://www.geotrust.com/resources/advisory/sslorg/index.htmBroken LinkExploitVendor Advisory
- http://www.geotrust.com/resources/advisory/sslorg/sslorg-advisory.htmBroken LinkPatchVendor Advisory
- http://www.novell.com/linux/security/advisories/2005_31_opera.htmlBroken Link
- http://www.securityfocus.com/bid/13176Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40503Third Party AdvisoryVDB Entry
- http://www.geotrust.com/resources/advisory/sslorg/index.htmBroken LinkExploitVendor Advisory
- http://www.geotrust.com/resources/advisory/sslorg/sslorg-advisory.htmBroken LinkPatchVendor Advisory
- http://www.novell.com/linux/security/advisories/2005_31_opera.htmlBroken Link
- http://www.securityfocus.com/bid/13176Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40503Third Party AdvisoryVDB Entry
FAQ
What is CVE-2005-1139?
CVE-2005-1139 is a vulnerability with a CVSS score of 7.5 (HIGH). Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks.
How severe is CVE-2005-1139?
CVE-2005-1139 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-1139?
Check the references section above for vendor advisories and patch information. Affected products include: Opera Opera Browser.