directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alex Karasulu <>
Subject Re: Maven/Java 1.4.0 security issues
Date Sun, 06 Feb 2005 17:14:59 GMT
Niclas Hedhman wrote:

>On Sunday 06 February 2005 19:28, Brennan Stehling wrote:
>>An interesting problem any Windows might have is the bad JAVA_HOME
>>settings.  When I started to try Apache DS I suddenly got a ton of
>>virus problems.  Today I am working on running many Maven compiles and
>>now that I have Norton AntiVirus installed I am seeing it is blocking
>>this Trojan virus.
>>It seems j2sdk1.4.0_01 has a security bug in it and when I did install
>>j2sdk1.4.2_04 the new JAVA_HOME and PATH settings were not changed
>>from the older version.  As I compiled it may have been opening a
>>security hole and letting stuff in.
>>So you may want to check that your environment variables are set
>>properly and also uninstall Java 1.4.0.
>I don't know if it is related; My rt.jar was modified a few days ago. The 
>MessageFormat class (of all!) had been replaced.
No way is this on Linux Niclas?

View raw message