[37509] in bugtraq
Re: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access vulnerability
daemon@ATHENA.MIT.EDU (Exchange)
Thu Nov 25 14:43:35 2004
Message-ID: <008001c4d31b$dc2868b0$230110ac@campus.ad.utdallas.edu>
From: "Exchange" <pauls@utdallas.edu>
To: "Alla Bezroutchko" <alla@scanit.be>, <bugtraq@securityfocus.com>,
<full-disclosure@lists.netsys.com>
Date: Thu, 25 Nov 2004 12:23:20 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
----- Original Message -----
From: "Alla Bezroutchko" <alla@scanit.be>
To: <bugtraq@securityfocus.com>; <full-disclosure@lists.netsys.com>
Sent: Thursday, November 25, 2004 4:33 AM
Subject: [Full-Disclosure] Re: Sun Java Plugin arbitrary package access
vulnerability
>
> As noted by rodmoses(at)yahoo(dot)com Opera remains vulnerable even
> after the upgrade of JVM to version 1.4.2_06. (tested on Windows XP SP2,
> Opera 7.54, J2SE 1.4.2_06).
>
This wasn't mentioned in the original disclosure announcement, but is it
safe to assume that jre-1.5.0 would *not* be vulnerable? Or has it not been
tested?
Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
University of Texas at Dallas
http://www.utdallas.edu/
AVIEN Founding Member
