Multiple Vendor Java Web Start Unsigned Application Vulnerability

Bugtraq ID:	4310
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 18 2002 12:00AM
Updated:	Mar 18 2002 12:00AM
Credit:	This issue was announced in a Sun Security Bulletin.
Vulnerable:	Sun Java Web Start 1.0.1 _01 + Sun SDK (Linux Production Release) 1.3 Sun Java Web Start 1.0.1 + Sun SDK (Linux Production Release) 1.3 Sun Java Web Start 1.0 + Sun SDK (Linux Production Release) 1.3 HP Java Web Start 1.0.1 .00 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 4 - HP HP-UX 11.0 - HP HP-UX 11i v1 HP Java Web Start 1.0 .00 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 4 - HP HP-UX 11.0 - HP HP-UX 11i v1
Not Vulnerable:	Sun Java Web Start 1.0.1 _02 + Sun Java 2 Standard Edition SDK 1.4 HP Java Web Start 1.0.1 .01 - HP HP-UX 11.20 - HP HP-UX 11.11 - HP HP-UX 11.0 4 - HP HP-UX 11.0 - HP HP-UX 11i v1

Multiple Vendor Java Web Start Unsigned Application Vulnerability

Solution:
Sun and HP have released upgrades which rectify this issue.


HP Java Web Start 1.0 .00

• HP license_webstart_1-0-1-01
  http://www.hp.com/products1/unix/java/java2/webstart/downloads/license _webstart_1-0-1-01.html

Sun Java Web Start 1.0

• Sun Java 2 SDK, v 1.4
  http://java.sun.com/j2se/1.4/


• Sun Java Web Start 1.0.1_02
  http://java.sun.com/cgi-bin/javawebstart-platform.sh?

Sun Java Web Start 1.0.1

• Sun Java 2 SDK, v 1.4
  http://java.sun.com/j2se/1.4/


• Sun Java Web Start 1.0.1_02
  http://java.sun.com/cgi-bin/javawebstart-platform.sh?

HP Java Web Start 1.0.1 .00

• HP license_webstart_1-0-1-01
  http://www.hp.com/products1/unix/java/java2/webstart/downloads/license _webstart_1-0-1-01.html

Sun Java Web Start 1.0.1 _01

• Sun Java 2 SDK, v 1.4
  http://java.sun.com/j2se/1.4/


• Sun Java Web Start 1.0.1_02
  http://java.sun.com/cgi-bin/javawebstart-platform.sh?