CVEvulnerability
CVE-2001-1008
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
Affected configurations
• sun java plug-in 1.4
• sun jre 1.3.0
References
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html Vendor Advisory
- http://www.iss.net/security_center/static/7048.php www.iss.net
- http://www.securityfocus.com/bid/3245 Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html Vendor Advisory
- http://www.iss.net/security_center/static/7048.php www.iss.net
- http://www.securityfocus.com/bid/3245 Exploit, Patch, Vendor Advisory