CVE-2001-1008: High severity Sun Java Plug-In vulnerability

Published Aug 31, 2001

Updated

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.

Affected Software

2 affected components

Sun Java Plug-In=1.4

Sun JRE=1.3.0

Remediation

Patch Available

http://www.securityfocus.com/bid/3245

Event History

Aug 31, 2001

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1008?

CVE-2001-1008 is considered a high severity vulnerability due to the risk of executing potentially harmful applets from untrusted sources.

How do I fix CVE-2001-1008?

To mitigate CVE-2001-1008, upgrade to a version of the Java Runtime Environment that does not allow the execution of applets signed with expired certificates.

What software is affected by CVE-2001-1008?

CVE-2001-1008 affects Sun JRE version 1.3.0 and Sun Java Plug-In version 1.4.

What type of attacks can exploit CVE-2001-1008?

CVE-2001-1008 can be exploited by remote attackers to conduct unauthorized activities through signed applets with expired certificates.

Is there a workaround for CVE-2001-1008?

A potential workaround for CVE-2001-1008 includes disabling the Java Plug-in or configuring security settings to prevent running untrusted applets.