CVE-1999-0142: High severity sun java vulnerability
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Java Developer's Kit 1.0from your environment.Uninstall Java Developer's Kit 1.0 or remove its browser/plugin components until a secure fix is available.
- Remove
Remove
Netscape Navigator 2.0from your environment.Uninstall or stop using Netscape Navigator 2.0 until the Java Applet Security Manager vulnerability is addressed.
- Configuration
Disable Java applet execution in Netscape Navigator 2.0 to prevent applets from making arbitrary host connections.
Netscape Navigator 2.0 enable Java applets = false - Compensating control
Block or restrict outbound network connections from browsers/Java applets at the network or host-based firewall to prevent applets from connecting to arbitrary hosts.
- Operational
Do not run untrusted Java applets; only allow applets from trusted sources until the issue is resolved.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0142?
CVE-1999-0142 is considered a critical vulnerability due to its potential for allowing applets to connect to arbitrary hosts.
How do I fix CVE-1999-0142?
To fix CVE-1999-0142, update to a later version of Netscape Navigator or the Java Developer's Kit that addresses this vulnerability.
What versions of Netscape Navigator are affected by CVE-1999-0142?
Netscape Navigator 2.0 is affected by CVE-1999-0142.
Can CVE-1999-0142 be exploited remotely?
Yes, CVE-1999-0142 can be exploited remotely by malicious applets connecting to unauthorized hosts.
What is the main issue with the Java Applet Security Manager in CVE-1999-0142?
The main issue in CVE-1999-0142 is that the Java Applet Security Manager does not properly restrict applets from establishing connections to arbitrary hosts.