+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [3/5] Java 2 Platform Privilege Escalation Vulnerability (/showthread.php?tid=15)
[3/5] Java 2 Platform Privilege Escalation Vulnerability - Omniscient - May 2, 2007
Sun has acknowledged a vulnerability in the Java Web Start of the Java 2 Platform, which can be exploited by malicious people to bypass certain security restrictions.
Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/
Feature Overview - The Secunia Software Inspector:
Detects insecure versions of applications installed
Verifies that all Microsoft patches are applied
Assists you in updating your system and applications
Runs through your browser. No installation or download is required.
Posted at http://secunia.com/advisories/25069/
* - _ryuurei - Aug 12, 2010
Hm... It's amazing this sort of thing can be done. There goes Java's reputation. To some extent.
* - Dr.SLiM - Aug 12, 2010
I hope this helps someone out. Always gotta be careful with Java
* - Fizzix - Aug 12, 2010
Today (three years after this was posted), I actually found something out in the wild, using an updated method for this. It silently infected me, except for I have the console pop up when applets run(while running Java 7, and fully updated Windows 7). It didn't have the "do you want to run this applet" box.
I'll probably provide more details once I figure it out. ATM trying to get w/e was put on my pc off.
* - [[R9]] - Aug 12, 2010
Well i heard this some time before coming online from my uncle. He is cyber security analyst.
Thanx anyway for info.
Java is future of computer language. Which is not easy to be exploited but have too many must do improvment thing.
* - Kyuubi - Aug 12, 2010
Good thing I have secunia already on my PC ;]
* - Fizzix - Aug 12, 2010
(Aug 12, 2010 10:59 AM)Kyuubi Wrote: Good thing I have secunia already on my PC ;]
I doubt it will detect it... The one I came across uses a different method.