in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JRE 1.6.0

Last post 05-01-2009 5:22 PM by Blue1978. 1 replies.
Page 1 of 1 (2 items)
Sort Posts: Previous Next
  • 05-01-2009 1:48 PM

    Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JRE 1.6.0

    I have not been able to get rid of this finding in my lab.  We have JRE 1.6.0 Update 13 installed on all systems which, as far as we can tell, is the very latest release available.  The finding in Retina recommends an upgrade to Update 16 or later.  How can we possibly remediate this finding when this version does not appear to exist?  Is anyone else having this problem?

    Pierce

  • 05-01-2009 5:22 PM In reply to

    Re: Sun JRE/JDK Multiple Vulnerabilities (20090324) - Windows - JRE 1.6.0

    Did you completely un-install the old version first and then clean your system with a tool like the free program "CCleaner" to ensure all of the old registry keys and program file folders were gotten rid of prior to installing the latest version?  Java is another program (like Adobe Flash) that if you simply install the latest version over it, you still will have issues with vulnerable components being installed.

    Locations like:

    C:\Documents and Settings\"profile's name"\Application Data  (Make sure the Sun folder no longer exists under any profile you may have on your system)

    C:\Program Files\  (Make sure the Java folder no longer exists)

    C:\WINDOWS  (Make sure the java folder no longer exists)

    C:\WINDOWS (Make sure the Sun folder no longer exists)

    Make sure the files: java.exe, javacpl.cpl, javaw.exe, and javaws.exe no longer exist under the  C:\WINDOWS\system32 folder.

    Can you post your Retina scan result into this post too that is telling you that your Java is not correct?

     

    You can also look at this post also, another user was having similar issues:  http://forums.eeye.com/forums/p/960/4135.aspx#4135

Page 1 of 1 (2 items)
© 1995 - 2009 eEye Incorporated