SecurityFocus

Sun Java Plugin arbitrary package access vulnerability Nov 23 2004 07:02AM
Jouko Pynnonen (jouko iki fi) (2 replies)

Re: Sun Java Plugin arbitrary package access vulnerability Nov 25 2004 10:33AM
Alla Bezroutchko (alla scanit be) (2 replies)

Rumours about Opera Nov 25 2004 09:22PM
Marc Schoenefeld (schonef uni-muenster de)

Re: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access vulnerability Nov 25 2004 06:23PM
Exchange (pauls utdallas edu)

----- Original Message -----
From: "Alla Bezroutchko" <alla (at) scanit (dot) be [email concealed]>
To: <bugtraq (at) securityfocus (dot) com [email concealed]>; <full-disclosure (at) lists.netsys (dot) com [email concealed]>
Sent: Thursday, November 25, 2004 4:33 AM
Subject: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access
vulnerability
>
> As noted by rodmoses(at)yahoo(dot)com Opera remains vulnerable even
> after the upgrade of JVM to version 1.4.2_06. (tested on Windows XP SP2,
> Opera 7.54, J2SE 1.4.2_06).
>
This wasn't mentioned in the original disclosure announcement, but is it
safe to assume that jre-1.5.0 would *not* be vulnerable? Or has it not been
tested?

Paul Schmehl (pauls (at) utdallas (dot) edu [email concealed])
Adjunct Information Security Officer
University of Texas at Dallas
http://www.utdallas.edu/
AVIEN Founding Member

[ reply ]

Re: Sun Java Plugin arbitrary package access vulnerability Nov 23 2004 10:35PM
Ken S (ken securitylist gmail com)