PT-2002-1150 · Microsoft+2 · Internet Explorer+3

Published 2002-03-07 · Updated 2018-10-12 · CVE-2002-0058

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions prior to the fixed version Netscape versions 6.0 through 6.1 and 4.79 and earlier Microsoft VM build 3802 and earlier

Description A remote issue in Java Runtime Environment allows malicious web sites to hijack or sniff a web client's sessions when an HTTP proxy is being used. This can be achieved via a Java applet that redirects the session to another server.

Recommendations For Java Runtime Environment versions prior to the fixed version, update to a version that contains a fix for this issue. For Netscape versions 6.0 through 6.1 and 4.79 and earlier, consider disabling Java applets until a patch is available. For Microsoft VM build 3802 and earlier, restrict access to Java applets in Internet Explorer 4.x and 5.x to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0058

Affected Products

Internet Explorer

Java Runtime Environment

Vm

Netscape

References · 5

• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0058 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0058 · Note
• http://marc.info/?l=bugtraq&m=101534535304228&w=2 · Note