CVE-2007-5276

Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.

🔗 References (4)

• cve@mitrehttp://crypto.stanford.edu/dns/dns-rebinding.pdf
• cve@mitrehttp://osvdb.org/45526
• af854a3a-2127-422b-91ae-364da2661108http://crypto.stanford.edu/dns/dns-rebinding.pdf
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/45526