Mailing-List: contact directory-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List"
 <directory-dev@incubator.apache.org>
Received-SPF: pass (hermes.apache.org: domain of offwhite@gmail.com designates
 64.233.170.204 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding;
        b=CllmhJxmPfDbKLa3C2LEyORBg+RG+8LDmTpUBeDCAtLptcMSKDG3lsihxu6+IBHgL3f00TAz23xdA29juCjvssp9uoHEqCxtTHWKN/sbSeNiPvnngkm2slx3uDwtjwrA22uB7z9MjLJspY6P4zKsG1VHaSs9e2JNvsn2zNCh8v4=
Message-ID: <8dd4018b05020603283313a8e6@mail.gmail.com>
Date: Sun, 6 Feb 2005 05:28:07 -0600
From: Brennan Stehling <offwhite@gmail.com>
Reply-To: brennan.stehling@offwhite.net
To: Apache Directory Developers List <directory-dev@incubator.apache.org>
Subject: Maven/Java 1.4.0 security issues
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

An interesting problem any Windows might have is the bad JAVA_HOME
settings.  When I started to try Apache DS I suddenly got a ton of
virus problems.  Today I am working on running many Maven compiles and
now that I have Norton AntiVirus installed I am seeing it is blocking
this Trojan virus.

It seems j2sdk1.4.0_01 has a security bug in it and when I did install
j2sdk1.4.2_04 the new JAVA_HOME and PATH settings were not changed
from the older version.  As I compiled it may have been opening a
security hole and letting stuff in.

So you may want to check that your environment variables are set
properly and also uninstall Java 1.4.0.

-- 
Brennan Stehling
 + http://brennan.offwhite.net/blog/