Lucene search
HistoryJun 15, 2009 - 7:30 p.m.
CVE-2009-2059
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
58.6%
Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an “SSL tampering” attack.
Affected configurations
Node
operaopera_browserRange≤9.22
ORoperaopera_browserMatch7.0
ORoperaopera_browserMatch7.23
ORoperaopera_browserMatch7.53
ORoperaopera_browserMatch7.54
ORoperaopera_browserMatch7.60
ORoperaopera_browserMatch8.0
ORoperaopera_browserMatch8.01
ORoperaopera_browserMatch8.02
ORoperaopera_browserMatch8.50
ORoperaopera_browserMatch8.51
ORoperaopera_browserMatch8.52
ORoperaopera_browserMatch8.53
ORoperaopera_browserMatch8.54
ORoperaopera_browserMatch9.0
ORoperaopera_browserMatch9.01
ORoperaopera_browserMatch9.02
ORoperaopera_browserMatch9.10
ORoperaopera_browserMatch9.12
ORoperaopera_browserMatch9.20
ORoperaopera_browserMatch9.21
Related
prion
prion
Hardcoded credentials
2009-06-15 19:30:00
cvelist
cvelist
CVE-2009-2059
2022-10-03 16:24:08
cve
cve
CVE-2009-2059
2022-10-03 16:24:08
openvas
openvas
Opera Web Script Execution Vulnerabilities (Jun 2009) - Windows
2009-06-17 00:00:00
Opera Web Script Execution Vulnerabilities (Jun 2009) - Linux
2009-06-17 00:00:00
SUSE: Security Summary (SUSE-SR:2009:015)
2009-09-21 00:00:00
nessus
nessus
openSUSE 10 Security Update : opera (opera-6473)
2009-10-06 00:00:00
openSUSE Security Update : opera (opera-1261)
2009-09-03 00:00:00
openSUSE Security Update : opera (opera-1261)
2009-09-03 00:00:00
gentoo
gentoo
Opera: Multiple vulnerabilities
2012-06-15 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
58.6%
Related for NVD:CVE-2009-2059