CVE

Id
2139  
CVE No.
CVE-2000-0563  
Status
Candidate  
Description
The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.  
Phase
Proposed (20000712)  
Votes
ACCEPT(2) Levy, Ozancin | MODIFY(1) Frech | NOOP(2) Christey, Wall | REVIEWING(1) LeBlanc  
Comments
Christey> Confirmed by Scott Culp, but this only applies to | outdated/unsupported versions of the JVM. | Frech> XF:macos-java-security-ignored(5052) | Christey> Consult with Microsoft to ensure that this is fixed by | MS:MS00-059. If so, then this might not just be in MacOS.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
7391 2139 CVE-2000-0563 BUGTRAQ:20000609 Security Holes Found in URLConnection of MRJ and IE of Mac OS (was Re: Reappearance of an old IE security bug)  View
7392 2139 CVE-2000-0563 URL:http://archives.neohapsis.com/archives/bugtraq/2000-06/0056.html  View
7393 2139 CVE-2000-0563 BUGTRAQ:20000513 Re: Reappearance of an old IE security bug  View
7394 2139 CVE-2000-0563 URL:http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-05-8&msg=391C95DE2DA.5E3BTAKAGI@java-house.etl.go.jp  View
7395 2139 CVE-2000-0563 BID:1336  View

Related JVN