CVE-2002-0058: Medium severity Sun SDK vulnerability
Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0058?
CVE-2002-0058 is classified as a high severity vulnerability due to its potential for session hijacking.
How do I fix CVE-2002-0058?
Fixing CVE-2002-0058 involves updating the affected Java Runtime Environment or Java Development Kit to a later version that addresses this vulnerability.
Which software versions are affected by CVE-2002-0058?
CVE-2002-0058 affects multiple versions of the Sun JRE, JDK, and Microsoft Virtual Machine, including versions 1.1.8, 1.2.2, and 1.3.0.
Can CVE-2002-0058 be exploited remotely?
Yes, CVE-2002-0058 can be exploited remotely by malicious websites to hijack or sniff web client sessions.
What types of attacks does CVE-2002-0058 facilitate?
CVE-2002-0058 facilitates session hijacking attacks by allowing an applet to redirect a user's session to a different server.