Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2001-1008
cve-2001-1008
java
plugin 1.4
jre 1.3
expired certificate
unauthorized activities
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.2%
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
Affected configurations
Node
sunjava_plug-inMatch1.4
ORsunjreMatch1.3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:java_plug-in | sun java plug-in | eq | 1.4 |
| sun:jre | sun jre | eq | 1.3.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.2%
Related for CVE-2001-1008