Openwall Project   /home  Owl  JtR  Pro  crypt  pam_passwdqc  tcb  phpass  scanlogd  popa3d  msulogin  /  Linux  BIND  /  advisories  presentations  /  services  donations  /  wordlists  passwords  /  news  community  lists  wiki  CVSweb  mirrors  signatures
bringing security into open environments
 
Password Recovery Resources on the Net
[<prev] [next>] [month] [year] [list]
Date: Thu, 30 Oct 2008 20:04:07 +0100
From: Craig <craig@...uarter.de>
To: oss-security@...ts.openwall.com
Subject: CVE Request / Question

Do we have a CVE for this yet? If not, please assign one.

[SA32452] Opera Command Execution and Cross-Site Scripting

Critical:    Highly critical
Where:       From remote
Impact:      Cross Site Scripting, System access
Released:    2008-10-30

Some vulnerabilities have been reported in Opera, which can be
exploited by malicious people to conduct cross-site scripting attacks
or potentially to compromise a user's system.

Full Advisory:
http://secunia.com/advisories/32452/

Best regards,

Craig

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux