[email protected]CVE-2011-0684

HistoryJan 31, 2011 - 9:00 p.m.

CVE-2011-0684

2011-01-3121:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2011-0684

opera

http

response manipulation

security

vulnerability

nvd

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.4%

JSON

Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files, via an unknown response manipulation.

CPENameOperatorVersion
opera:opera_browseropera opera browsereq7.01
opera:opera_browseropera opera browsereq9.27
opera:opera_browseropera opera browsereq7.23
opera:opera_browseropera opera browsereq9.50
opera:opera_browseropera opera browsereq9.02
opera:opera_browseropera opera browsereq10.53
opera:opera_browseropera opera browsereq7.03
opera:opera_browseropera opera browsereq10.10
opera:opera_browseropera opera browsereq7.53
opera:opera_browseropera opera browsereq8.50

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	eq	7.01
opera:opera_browser	opera opera browser	eq	9.27
opera:opera_browser	opera opera browser	eq	7.23
opera:opera_browser	opera opera browser	eq	9.50
opera:opera_browser	opera opera browser	eq	9.02
opera:opera_browser	opera opera browser	eq	10.53
opera:opera_browser	opera opera browser	eq	7.03
opera:opera_browser	opera opera browser	eq	10.10
opera:opera_browser	opera opera browser	eq	7.53
opera:opera_browser	opera opera browser	eq	8.50

Rows per page:

1-10 of 731

References

osvdb.org/70730

secunia.com/advisories/43023

www.opera.com/docs/changelogs/mac/1101/

www.opera.com/docs/changelogs/unix/1101/

www.opera.com/docs/changelogs/windows/1101/

www.opera.com/support/kb/view/984/

www.securityfocus.com/bid/46036

www.vupen.com/english/advisories/2011/0231

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12296

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.4%

JSON

Related for CVE-2011-0684

prion1 nessus5 freebsd1 openvas6 gentoo1