Vulnerability Description
Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Virtual Machine | 3802 |
| Sun | Jdk | 1.1.8 |
| Sun | Jre | 1.1.8 |
| Sun | Sdk | 1.1.8_007 |
References
- http://marc.info/?l=bugtraq&m=101534535304228&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-01
- http://marc.info/?l=bugtraq&m=101534535304228&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-01
FAQ
What is CVE-2002-0058?
CVE-2002-0058 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the ses...
How severe is CVE-2002-0058?
CVE-2002-0058 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-0058?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Virtual Machine, Sun Jdk, Sun Jre, Sun Sdk.