CVE-2009-3045
Opera < 10.00 - Man-in-the-Middle Attack via MD2-Signed X.509 Certificates
Title source: llmDescription
Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate.
References (7)
Core 7
Core References
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/windows/1000/
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/freebsd/1000/
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/solaris/1000/
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/linux/1000/
Vendor Advisory x_refsource_confirm
http://www.opera.com/support/kb/view/933/
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/mac/1000/
Scores
EPSS
0.0025
EPSS Percentile
48.2%
Details
CWE
CWE-310
Status
published
Products (25)
opera/opera_browser
7.0
opera/opera_browser
7.23
opera/opera_browser
7.53
opera/opera_browser
7.54
opera/opera_browser
7.60
opera/opera_browser
8.0
opera/opera_browser
8.01
opera/opera_browser
8.02
opera/opera_browser
8.50
opera/opera_browser
8.51
... and 15 more
Published
Sep 02, 2009
Tracked Since
Feb 18, 2026