PT-2002-1150 · Microsoft+2 · Internet Explorer+3

Publicado 2002-03-07 · Atualizado 2018-10-12 · CVE-2002-0058

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions prior to the fixed version Netscape versions 6.0 through 6.1 and 4.79 and earlier Microsoft VM build 3802 and earlier

Description A remote issue in Java Runtime Environment allows malicious web sites to hijack or sniff a web client's sessions when an HTTP proxy is being used. This can be achieved via a Java applet that redirects the session to another server.

Recommendations For Java Runtime Environment versions prior to the fixed version, update to a version that contains a fix for this issue. For Netscape versions 6.0 through 6.1 and 4.79 and earlier, consider disabling Java applets until a patch is available. For Microsoft VM build 3802 and earlier, restrict access to Java applets in Internet Explorer 4.x and 5.x to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0058

Produtos afetados

Internet Explorer

Java Runtime Environment

Vm

Netscape

Referências · 5

• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0058 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0058 · Nota
• http://marc.info/?l=bugtraq&m=101534535304228&w=2 · Nota