Vulnerability Details CVE-2001-1008
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html
- http://www.iss.net/security_center/static/7048.php
- http://www.securityfocus.com/bid/3245
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html
- http://www.iss.net/security_center/static/7048.php
- http://www.securityfocus.com/bid/3245
Products affected by CVE-2001-1008
-
cpe:2.3:a:sun:java_plug-in:1.4
-
cpe:2.3:a:sun:jre:1.3.0