PT-2001-2157 · Oracle · Java Plug-In+1

Publicado 2001-08-31 · Atualizado 2008-09-05 · CVE-2001-1008

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java Plugin 1.4 for JRE 1.3

Description The issue allows remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate, as the Java Plugin executes signed applets even if the certificate is expired.

Recommendations For Java Plugin 1.4 for JRE 1.3, consider disabling the execution of applets with expired certificates as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-1008

Produtos afetados

Jre

Java Plug-In

Referências · 5

• 🔥 http://securityfocus.com/bid/3245 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1008 · Nota de Segurança
• http://iss.net/security_center/static/7048.php · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1008 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html · Aviso do Fabricante