PT-2001-2157 · Oracle · Java Plug-In+1

Published 2001-08-31 · Updated 2008-09-05 · CVE-2001-1008

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java Plugin 1.4 for JRE 1.3

Description The issue allows remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate, as the Java Plugin executes signed applets even if the certificate is expired.

Recommendations For Java Plugin 1.4 for JRE 1.3, consider disabling the execution of applets with expired certificates as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2001-1008

Affected Products

Jre

Java Plug-In

References · 5

• 🔥 http://securityfocus.com/bid/3245 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1008 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html · Vendor Advisory
• http://iss.net/security_center/static/7048.php · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1008 · Note