eEye Digital Security

Hi, All. Does anyone out there know where (exactly) to find the above for Vista? I have been all over the internet and cannot find it. Blink says: "Note: JRE/JDK 1.4.x/1.3.x updates are available only through Sun Vintage Support or Java SE for Business contracts." Windows JRE/JDK 1.6.0: Upgrade to Update 16 or newer. JRE/JDK 1.5.0: Upgrade to Update 18 or newer. JRE/JDK 1.4.2: Upgrade to Update 20 or newer, or migrate to a newer version. JRE/JDK 1.3.1: Upgrade to Update 25 or newer, or migrate to a newer version. I googled: Sun Vintage, then Sun Vintage Support and even Java SE for Business contracts (although I am NOT a bsns customer.) Anyway- ALL TO NO AVAIL. Is this Java stuff meant to be so purposely elusive? Wini

Try this -- http://java.sun.com/products/archive/

 

Didn't find it there - the choices were too varied and vague. So I did another search and (finally!) found it (JRE Version 1.6.0_13) at: http://java.sun.com/javase/downloads/index.jsp (first option.) The obtusiveness involved in easily providing the correct download(s) by Sun cannot be just an accident. The average person like me - not a geek - should be provided with easier means to get the correct download. Shame on Sun. Hope this helps some other Blink loyalists.

Well, that didn't work. Still have the high risk on Blink's Security Report:Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JDK 1.5.0. Never did find download JRE/JDK 1.6.0 Update 16 for Vista; so installed JRE Version 1.6.0_13 which doesn't remove the above. Did anyone have success? I'd LOVE to hear from a Blink techie on this issue. Thanks.

Java "sometimes" acts like Flash does (i.e. it does not update itself properly by simply installing a new version without un-installing the old one first).

1.  Un-install any versions of Java you have on your system.  Do a search of your system for any folders left over that relate to Java, delete them.

- if your brave do a search of your registry for "Java" and make sure the core keys for the old version are removed also (if you feel compfortable doing this).

2.  Run a program like CCleaner to tidy up your system after you do this.

3.  Download the latest version of JRE located here:  http://java.sun.com/javase/downloads/index.jsp

     - you really don't need the JDK version, the JRE is plenty (unless you are a developer).

OK, Blue1978 - I'm on it. All but the registry stuff. I am psychologically crippled when it comes to manually doing ANYTHING with it. I'll get back to you after deleting all Java, then reinstalling. Thanks

Well - followed your instructions - booted; then reinstalled; ran Blink scan - and STILL have the same high risk issue: Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JDK 1.5.0

Wow, that is weird .... maybe one of the folks from eEye can pinpoint exactly what this audit is looking for on your system that you can't seem to get rid of with the update.

 

 

 

Winifred:

Well, that didn't work. Still have the high risk on Blink's Security Report:Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JDK 1.5.0. Never did find download JRE/JDK 1.6.0 Update 16 for Vista; so installed JRE Version 1.6.0_13 which doesn't remove the above. Did anyone have success? I'd LOVE to hear from a Blink techie on this issue. Thanks.

Winifred:

Well - followed your instructions - booted; then reinstalled; ran Blink scan - and STILL have the same high risk issue: Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JDK 1.5.0

 

I believe you are mistaken...  The VA scan is finding a vulnerable version of Sun Java JDK 5 (aka 1.5) installed -- indicated by the " - Windows - JDK 1.5.0" notation, so installing the 1.6 update will not resolve the issue since doing so doesn't remove/upgrade version 1.5.  You'll need to remove the JDK 5 installation --or--- download an update for it here: http://java.sun.com/javase/downloads/index_jdk5.jsp

OK, nomuus - I'm on it.  I'll get back to you!

Uninstall was unsuccessful - system wouldn't allow me to uninstall.  Went to your url for update and am confused about WHICH update to choose.  Based on a prior Blink 'high risk' some time ago I had installed Net Beans - I have never known what that was for.  I am not a developer nor software creator - DO I NEED NET BEANS?  If not can I just uninstall it?  It has a big footprint and I could use the space.  Could you help me with these several questions?

Winifred:

Uninstall was unsuccessful - system wouldn't allow me to uninstall.  Went to your url for update and am confused about WHICH update to choose.  Based on a prior Blink 'high risk' some time ago I had installed Net Beans - I have never known what that was for.  I am not a developer nor software creator - DO I NEED NET BEANS?  If not can I just uninstall it?  It has a big footprint and I could use the space.  Could you help me with these several questions?

Did you mean that the uninstall of the Java Dev Kit (JDK) was unsuccessful?  If the uninstall of JDK was unsuccessful then it might be because of Netbeans.  To answer your question, no you do not need Netbeans and you shouldn't need the JDK if you aren't a developer.  Try first uninstalling Netbeans, then uninstalling JDK -- the files might depend on each other hence the issue.  Sun's site is confusing with all the options such as J2SE, Netbeans, Java for Business...the list goes on...in your case you should only ever need the Java Runtime Environment (JRE).

OK.  I uninstalled the Net Beans successfully; however unsuccessful in my attempt to uninstall:J2SE Development Kit 5.0 Update 16 - here's the uninstall error message I get: Error 1327.Invalid Drive:E:\    The ONLY other Java thing is J2SE Runtime Environment 5.0 Update 16 and it's most current update 13.  Is there something else blocking uninstall?  Could it be something else that I installed via Blink's directive re: high risk item i.e.Net Beans?    Is there any overiding way to uninstall it?  Or, failing that, should I install its update per your original suggestion?