|
Gentoo update for opera
|
|
Secunia Advisory:
|
SA14282
|
|
|
Release Date:
|
2005-02-15
|
|
Popularity:
|
4,984 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Spoofing
Exposure of system information
Privilege escalation
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Gentoo Linux 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
| | CVE reference: | CVE-2004-1157
|
|
Description:
Gentoo has issued an update for opera. This fixes some vulnerabilities, which can be exploited by malicious people to disclose some system information, spoof the content of websites, trick a user into executing malicious files and compromise a user's system.
For more information:
SA13253
SA12981
SA13447
SA13818
SA13257
A Gentoo specific vulnerability has also been reported, which can be exploited by malicious, local users to gain escalated privileges.
The vulnerability is caused due to a configuration error, where Opera loads libraries from a shared directory writable for users in the "portage" group. This can be exploited to execute arbitrary code via a malicious library with the privileges of the user running opera.
Solution:
Update to "net-www/opera-7.54-r3" or later.
Original Advisory:
http://security.gentoo.org/glsa/glsa-200502-17.xml
Other References:
SA13253:
http://secunia.com/advisories/13253/
SA12981:
http://secunia.com/advisories/12981/
SA13447:
http://secunia.com/advisories/13447/
SA13818:
http://secunia.com/advisories/13818/
SA13257:
http://secunia.com/advisories/13257/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
Today
|
New advisories:
|
9 |
|
New vulnerabilities:
|
29 |
|
Updated advisories:
|
10 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
6th Oct, 2008
|
New advisories:
|
19 |
|
New vulnerabilities:
|
52 |
|
Updated advisories:
|
26 |
|
|
|
|
 Solutions | More...
|
|
