CVE-2004-2393

Affected software : Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2. Issue : JSSE does not properly validate the certificate chain of a client or server, enabling remote attackers to falsely authenticate peers for SSL/TLS. Root cause : insufficient certificate-chain validation. Impact :...

HP-UX PHSS_28686 : s700_800 11.04 Virtualvault 4.6 OWS update

s700800 11.04 Virtualvault 4.6 OWS update : The remote HP-UX host is affected by multiple vulnerabilities : - A remotely exploitable potential vulnerability has been reported in CAN-2003-0078. - 1 A defect in the JavaTM Virtual Machine may allow illegal access to protected fields or methods of an...