Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

opera: RSA signature forgery

Package(s):

opera

CVE #(s):

Created:

September 28, 2006

Updated:

October 4, 2006

Description:

The Opera browser has a problem verifying OpenSSL PKCS #1 v1.5 RSA signatures. An attacker can use this to forge certificates and appear as a valid CA.

Alerts:

Gentoo

200609-18

2006-09-28

(Log in to post comments)