CVE-2007-5276

Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.
References
Link Resource
http://crypto.stanford.edu/dns/dns-rebinding.pdf Technical Description Third Party Advisory
http://osvdb.org/45526 Broken Link
Configurations

Configuration 1

cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*

Information

Published : 2007-10-08 11:17

Updated : 2022-03-01 02:56


NVD link : CVE-2007-5276

Mitre link : CVE-2007-5276

Products Affected