CVE-2007-5276 — MEDIUM (4.3)

Vulnerability Description

Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Opera	Opera Browser	9.0

References

http://crypto.stanford.edu/dns/dns-rebinding.pdfTechnical DescriptionThird Party Advisory
http://osvdb.org/45526Broken Link
http://crypto.stanford.edu/dns/dns-rebinding.pdfTechnical DescriptionThird Party Advisory
http://osvdb.org/45526Broken Link

FAQ

What is CVE-2007-5276?

CVE-2007-5276 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC,...

How severe is CVE-2007-5276?

CVE-2007-5276 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2007-5276?

Check the references section above for vendor advisories and patch information. Affected products include: Opera Opera Browser.