Sun JDK/JRE不允许类装载漏洞发布时间：2000-12-11 更新时间：2000-12-11 严重程度：中 威胁程度：普通用户访问权限 错误类型：设计错误 利用方式：服务器模式 受影响系统 Sun Java HotSpot Performance Engine 1.0.1详细描述 Sun's Java 实时运行环境存在一个漏洞，不被信任的JAVA 代码可以调用CLASS， 导致恶意APPLET被使用，导致系统存在安全问题。 测试代码 尚无 解决方案 请下栽补丁： Sun JDK (Linux Production Release) 1.2.2_005: Sun upgrade JDK 1.2.2_006 Linux Production http://java.sun.com/products/jdk/1.2/download-linux.html Sun JDK (Solaris Production Release) 1.2.2_05: Sun upgrade SDK 1.3.0 Solaris http://www.sun.com/software/solaris/java/download.html Sun JDK (Solaris Production Release) 1.1.8_10: Sun upgrade JDK 1.1.8_12 Solaris Production http://www.sun.com/software/solaris/java/archive.html Sun JDK (Solaris Reference Release) 1.2.2_004: Sun upgrade SDK 1.3.0 Solaris http://www.sun.com/software/solaris/java/download.html Sun JDK (Solaris Reference Release) 1.2.1_003: Sun upgrade SDK v1.2.1_004 Solaris Reference http://java.sun.com/products/jdk/1.2.1/download-solaris.html Sun JDK (Solaris Reference Release) 1.1.8_002: Sun upgrade JDK 1.1.8_005 Solaris Reference http://java.sun.com/products/jdk/1.1/download-jdk-solaris.html Sun JDK (Solaris Reference Release) 1.1.7B_005: Sun upgrade JDK 1.1.7B_007 Solaris Reference http://java.sun.com/products/jdk/1.1.7B/download-jdk-solaris.html Sun JDK (Solaris Reference Release) 1.1.6_007: Sun upgrade JDK 1.1.6_009 Solaris Reference http://java.sun.com/products/jdk/1.1.6/download-jdk-solaris.html Sun JDK (Windows Production Release) 1.2.1_003: Sun upgrade SDK v 1.2.1_004 Windows 95 / 98 / NT 4.0 http://java.sun.com/products/jdk/1.2.1/download-windows.html Sun JDK (Windows Production Release) 1.1.8_002: Sun upgrade JDK 1.1.x Win32 http://java.sun.com/products/jdk/1.1/download-jdk-windows.html Sun JDK (Windows Production Release) 1.1.7B_005: Sun upgrade JDK 1.1.7B_007 Win32 http://java.sun.com/products/jdk/1.1.7B/download-jdk-windows.html Sun JDK (Windows Production Release) 1.1.6_007: Sun upgrade JDK 1.1.6_009 Win32 http://java.sun.com/products/jdk/1.1.6/download-jdk-windows.html 相关信息 |
