AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?storyid=1640
Last Updated: 2006-08-26 02:21:06 UTC
"…SUN says prior to version 5.0 Update 6, an application or an applet could specify the version of the JRE on which it would run. "This issue can occur in the following releases (for Solaris, Linux and Windows platforms):
Java Plug-in included with J2SE 5.0 Update 5 and earlier, 1.4.x, 1.3.1, and 1.3.0_02 and later
Java Web Start included with J2SE 5.0 Update 5 and earlier, and 1.4.2
Java Web Start 1.2, 1.0.2, 1.0.1, and 1.0".
* http://sunsolve.sun.com/search/printfriend…y=1-26-102557-1
Date Released: 21-Aug-2006
"Impact
…versions of Java Web Start and the Java Plug-in… may allow applets or applications to run with a specified version of the JRE that does not have the latest security fixes…
Relief/Workaround
…use the latest JRE releases available from Sun and remove all symbolic links of earlier versions of Java Plug-in from the browser "plugins" directory…
Note: Prior to 5.0 Update 6, an application could specify the version of the JRE on which it would run. With 5.0 Update 6 and later installed, unsigned Java Web Start applications that specify a version other than the latest installed will trigger a warning, requiring explicit user permission before the application will run. Signed Java Web Start applications are not affected…"
Download at the following link:
* http://java.sun.com/j2se/1.5.0/download.jsp
(Latest is JRE 1.5.0_08. It is "Highly Recommended" that older versions be uninstalled)
- http://isc.sans.org/diary.php?storyid=1640
Last Updated: 2006-08-26 02:21:06 UTC
"…SUN says prior to version 5.0 Update 6, an application or an applet could specify the version of the JRE on which it would run. "This issue can occur in the following releases (for Solaris, Linux and Windows platforms):
Java Plug-in included with J2SE 5.0 Update 5 and earlier, 1.4.x, 1.3.1, and 1.3.0_02 and later
Java Web Start included with J2SE 5.0 Update 5 and earlier, and 1.4.2
Java Web Start 1.2, 1.0.2, 1.0.1, and 1.0".
* http://sunsolve.sun.com/search/printfriend…y=1-26-102557-1
Date Released: 21-Aug-2006
"Impact
…versions of Java Web Start and the Java Plug-in… may allow applets or applications to run with a specified version of the JRE that does not have the latest security fixes…
Relief/Workaround
…use the latest JRE releases available from Sun and remove all symbolic links of earlier versions of Java Plug-in from the browser "plugins" directory…
Note: Prior to 5.0 Update 6, an application could specify the version of the JRE on which it would run. With 5.0 Update 6 and later installed, unsigned Java Web Start applications that specify a version other than the latest installed will trigger a warning, requiring explicit user permission before the application will run. Signed Java Web Start applications are not affected…"
Download at the following link:
* http://java.sun.com/j2se/1.5.0/download.jsp
(Latest is JRE 1.5.0_08. It is "Highly Recommended" that older versions be uninstalled)