PT-2001-1138 · Oracle · Java Development Kit

Published 2001-01-09 · Updated 2018-09-20 · CVE-2000-1099

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java Development Kit (JDK) versions 1.2.2 05 and earlier

Description The issue allows an untrusted Java class to call into a disallowed class. This could enable an attacker to escape the Java sandbox and conduct unauthorized activities.

Recommendations For versions 1.2.2 05 and earlier, update to a version later than 1.2.2 05 to resolve the issue.

Fix

Related Identifiers

CVE-2000-1099

Affected Products

Java Development Kit

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2000-1099 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5605 · Note
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba · Note
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132 · Note
• http://osvdb.org/7255 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1099 · Note