CVE-2003-1229
- State
- Published
- Severity
- Not scored
- Published
- Aug 17, 2005
- Updated
- Aug 8, 2024
- Reserved
- Aug 17, 2005
Description
X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1006001vdb-entry
- 1007483vdb-entry
- 1006007vdb-entry
- http://java.sun.com/products/jsse/CHANGES.txt
- HPSBUX0301-239vendor-advisory
- sun-java-improper-validation(11182)vdb-entry
- 7943third-party-advisory
- 6682vdb-entry
- oval:org.mitre.oval:def:5883vdb-entrysignature
- 50081vendor-advisory
- 20030128 Incorrect Certificate Validation in Java Secure Socket Extensionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.