Vulnerability CVE-2009-2070 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2070 (CCN-51373)

Assigned:

2009-05-01

Published:

2009-05-01

Updated:

2012-06-07

Summary:

Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.

CVSS v3 Severity:

3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
2.1 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Other

References:

Source: MITRE
Type: CNA
CVE-2009-2070

Source: CCN
Type: Microsoft Research Web site
Pretty-Bad-Proxy: An Overlooked Adversary in Browsers HTTPS Deployments

Source: MISC
Type: UNKNOWN
http://research.microsoft.com/apps/pubs/default.aspx?id=79323

Source: MISC
Type: UNKNOWN
http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf

Source: CCN
Type: Opera Web site
Opera

Source: CCN
Type: OSVDB ID: 56487
Opera Proxy Server CONNECT Response Cached Certificate Use MiTM HTTPS Site Spoofing

Source: BID
Type: UNKNOWN
35411

Source: CCN
Type: BID-35411
Multiple Browsers Cached Certificate HTTP Site Spoofing Vulnerability

Source: XF
Type: UNKNOWN
opera-cachedcertificate-weak-security(51373)

Source: SUSE
Type: SUSE-SR:2009:015
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:opera:opera_browser:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:opera:opera_browser:5.11:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.03:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.04:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.05:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.01:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.02:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.06:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.0:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.11:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.20:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.51:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.52:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.23:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.50:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.22:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.21:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.10:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.03:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.02:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.01:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.10:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.12:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.10:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.21:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.54:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.54:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.0:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:7.23:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.01:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.51:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.53:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.02:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.01:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.52:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:8.0:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.20:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:9.02:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:5.02:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.1:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.11:*:*:*:*:*:*:*

OR cpe:/a:opera:opera_browser:6.12:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20092070	V	CVE-2009-2070	2015-11-16