full-disclosure - JRE < 1.4.2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <40A0F4D8.5050603@dolphtech.com>
From: dolphsec at dolphtech.com (Dolphsec)
Subject: JRE < 1.4.2_02 vulnerability

I am trying to find information on a vulnerability that I found at 
securityfocus.  Here is the URL for all the information...

http://www.securityfocus.com/bid/10301/info/
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57555

I am confused, being a semi-newbie, how this can be a vulnerability 
without an exploit.  Is it just that Sun does not want to admit that 
there is an exploit?  Does anyone have any more information on this that 
they can provide?

Thank you.