directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Niclas Hedhman <nic...@hedhman.org>
Subject Re: Maven/Java 1.4.0 security issues
Date Sun, 06 Feb 2005 14:41:46 GMT
On Sunday 06 February 2005 19:28, Brennan Stehling wrote:
> An interesting problem any Windows might have is the bad JAVA_HOME
> settings.  When I started to try Apache DS I suddenly got a ton of
> virus problems.  Today I am working on running many Maven compiles and
> now that I have Norton AntiVirus installed I am seeing it is blocking
> this Trojan virus.
>
> It seems j2sdk1.4.0_01 has a security bug in it and when I did install
> j2sdk1.4.2_04 the new JAVA_HOME and PATH settings were not changed
> from the older version.  As I compiled it may have been opening a
> security hole and letting stuff in.
>
> So you may want to check that your environment variables are set
> properly and also uninstall Java 1.4.0.

I don't know if it is related; My rt.jar was modified a few days ago. The 
MessageFormat class (of all!) had been replaced.

Cheers
Niclas

Mime
View raw message