First published: Tue Jan 09 2001(Updated: )
Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun JDK | =1.2.2-update4 | |
Sun JDK | =1.2.2-update5 | |
Sun JDK | =1.2.1-update3 | |
Sun JDK | <=1.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-1099 has a moderate severity rating due to the ability for untrusted Java classes to escape the Java sandbox.
To fix CVE-2000-1099, upgrade to a later version of the Java Development Kit that is not affected, specifically above version 1.2.2_update5.
CVE-2000-1099 affects Java Development Kit versions 1.2.1 and 1.2.2 up to update 5.
CVE-2000-1099 can lead to unauthorized activities as it allows untrusted classes to call disallowed methods.
While CVE-2000-1099 is an older vulnerability, it highlights important issues in Java security practices that may still be applicable for legacy systems.