Bug 381275 – <www-client/opera-11.51.1087 - Unsecured web content may appear to be secure or trusted through Extended Validation (CVE-2011-{3388,3389})

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2011-08-31 12:01:48 UTC]

From secunia security advisor at $URL:

Description:
1) An error when loading content can be exploited to cause Opera to display the security information of e.g. a trusted or secure website instead of the actual, untrusted website by loading and manipulating content in a certain sequence.

2) An unspecified error exists. No more information is currently available.

Solution:
Update to version 11.51.

[Comment 1 Jeroen Roovers (RETIRED) 2011-08-31 15:32:27 UTC]

Arch teams, please test and mark stable:
=www-client/opera-11.51.1087
Target KEYWORDS="amd64 x86"

[Comment 2 Jeroen Roovers (RETIRED) 2011-08-31 15:44:00 UTC]

http://www.opera.com/support/kb/view/1000/

== Unsecured web content may appear to be secure or trusted
       through Extended Validation ==

= Severity =
High

= Description =
Insecure sites should be shown in the address field as insecure (displayed as "Web" in the address field). When certain content is loaded and manipulated in a specific sequence, it can cause Opera to display the security information from the loaded resources in the address field and page information dialog. This allows a malicious page to display the security information from a secure or trusted third party, instead of its own security information.

[Comment 3 Agostino Sarubbo 2011-08-31 17:09:19 UTC]

Adding severity=4 per Tim's suggestion.

amd64 ok

[Comment 4 Elijah "Armageddon" El Lazkani (amd64 AT) 2011-08-31 17:43:03 UTC]

amd64: pass

[Comment 5 Tony Vroon (RETIRED) 2011-09-01 14:23:41 UTC]

+  01 Sep 2011; Tony Vroon <[e-mail]> opera-11.51.1087.ebuild:
+  Marked stable on AMD64 based on arch testing by Agostino "ago" Sarubbo &
+  Elijah "Armageddon" El Lazkani in security bug #381275.

[Comment 6 Paweł Hajdan, Jr. (RETIRED) 2011-09-04 00:50:47 UTC]

x86 stable

[Comment 7 Agostino Sarubbo 2011-09-04 00:53:05 UTC]

Thanks all, adding glsa vote.

[Comment 8 Tim Sammut (RETIRED) 2011-09-04 03:18:58 UTC]

Thanks, folks. GLSA Vote: no.

[Comment 9 GLSAMaker/CVETool Bot 2011-10-08 00:16:41 UTC]

CVE-2011-3388 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3388):
  Opera before 11.51 allows remote attackers to cause an insecure site to
  appear secure or trusted via unspecified actions related to Extended
  Validation and loading content from trusted sources in an unspecified
  sequence that causes the address field and page information dialog to
  contain security information based on the trusted site, instead of the
  insecure site.

[Comment 10 Stefan Behte (RETIRED) 2011-10-08 21:10:39 UTC]

Added to pending GLSA request.

[Comment 11 GLSAMaker/CVETool Bot 2012-06-15 17:41:13 UTC]

This issue was resolved and addressed in
 GLSA 201206-03 at http://security.gentoo.org/glsa/glsa-201206-03.xml
by GLSA coordinator Sean Amoss (ackle).