Vuln Dev
Java - JRE, SDK Java Web Start Jul 16 2007 03:18PM
jfvanmeter comcast net (3 replies)
Re: Java - JRE, SDK Java Web Start Jul 18 2007 07:19PM
3APA3A (3APA3A SECURITY NNOV RU)
Re: Java - JRE, SDK Java Web Start Jul 17 2007 06:56PM
Blue Boar (BlueBoar thievco com)
Even Sun's own installer will not remove previous versions. Even when
the security hole was that you could explicitly request a previous
version at runtime.

No sir, I don't like it.

BB

jfvanmeter (at) comcast (dot) net [email concealed] wrote:
> How does everyone feel about java being installed by vendors in a propriety path i.e. program files\mysoftware\bin\jre\1.4.0\ and never patching it.
>
> I ran an enterprise scan to looking for javaws.exe and found it in 175 unique paths. Should they be held accountable for the patching of java when they install it?
>
> I had one vendor who installed java 1.3 and 1.4, and when I ask them about it. There statement was â??you donâ??t have the modules that require those versions you can just delete themâ?
>
> How does everyone patch Java that is not installed in its default location?
>

[ reply ]
Re: Java - JRE, SDK Java Web Start Jul 17 2007 05:57PM
Kish Pent (kish_pent yahoo com)


 

Privacy Statement
Copyright 2010, SecurityFocus