Threat Level: green Handler on Duty: Russ McRee

SANS ISC: Determining Sun Java Vulnerability - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Determining Sun Java Vulnerability
A number of folks in the community have written in describing their experiences determining if they are vulnerable to the Java issue mentioned previously.
It appears that depending on your platform/configuration the sunjavaupdate scheduler may not apply the updates or notify the end-user in a timely manner. It appears to check for updates on the one month anniversary of the original install. So it may not check again for quite some time.
The Sun Java download site will determine if an update is needed if you're using IE and ActiveX:
http://www.java.com/download/index.jsp

Also the JavaTester site details all the different methods for determining what if any JDK/JRE is installed:
http://javatester.org/version.html

Also be aware many systems accumulate Java versions over time so you may have more than one installed.

Robert

49 Posts

Sign Up for Free or Log In to start participating in the conversation!