Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026
CVE-2004-2393
CVE-2004-2393
Description
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
Affected products
4cpe:2.3:a:sun:jsse:1.0.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sun:jsse:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jsse:1.0.3_01:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jsse:1.0.3_02:*:*:*:*:*:*:*
- Range: 1.0.3 - 1.0.3_2
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/11639nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- sunsolve.sun.com/search/document.donvdPatchVendor Advisory
- www.osvdb.org/6299nvdPatch
- www.securityfocus.com/bid/10387nvdPatch
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16194nvd
News mentions
0No linked articles in our index yet.