Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Sun Java JRE 1.6.x / 6.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Sun Microsystems
And, this specific program:
Oracle Java JRE 1.6.x / 6.x

This thread has been marked as resolved.
tc_uaine33 Sun Java JRE 1.6.x / 6.x
Member 16th Jun, 2010 20:01
Ranking: 0
Posts: 5
User Since: 28th Jul, 2009
System Score: N/A
Location: US
Hello,

I keep getting a notice that Sun Java JRE 1.6.x / 6.x is a threat. I've applied the fix, which ends up with me reinstalling it, twice. Once I did from the Secunia button and once from the Sun website. Secunia still reports that it is a problem. Thank you.

tc

Post "RE: Sun Java JRE 1.6.x / 6.x" has been selected as an answer.
Altara33606 RE: Sun Java JRE 1.6.x / 6.x
Member 16th Jun, 2010 20:02
Score: 1
Posts: 2
User Since: 16th Jun 2010
System Score: N/A
Location: N/A
I'm having the same problem. I've now downloaded & installed the fix at least 4 times. The instant I finish...I get the 'warning' again. How can I stop this?
Was this reply relevant?
+1
-0
mogs RE: Sun Java JRE 1.6.x / 6.x
Expert Contributor 16th Jun, 2010 20:06
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
http://secunia.com/community/forum/thread/show/418...

Worth reading Maurice's post in the thread above.

--
Was this reply relevant?
+4
-1
Altara33606 RE: Sun Java JRE 1.6.x / 6.x
Member 16th Jun, 2010 23:52
Score: 1
Posts: 2
User Since: 16th Jun 2010
System Score: N/A
Location: N/A
Last edited on 16th Jun, 2010 23:54
Thanks! It's doing great now. I clicked on the 'thumbs up'...guessing that's the Accept...don't see any other.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Sun Java JRE 1.6.x / 6.x
Handling Contributor 17th Jun, 2010 00:07
Score: 11736
Posts: 8,984
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@Altara33606

U will not see an Accept option. This is only available to the originator of a thread in this case @tc uaine33

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
thodgson RE: Sun Java JRE 1.6.x / 6.x
Member 17th Jun, 2010 02:28
Score: 0
Posts: 1
User Since: 29th Aug 2009
System Score: N/A
Location: N/A
Last edited on 17th Jun, 2010 02:38
The address above your remark is apparently not complete. Is the rest of the address available? http://secunia.com/community/forum/thread/show/418
did not yield a result.
Was this reply relevant?
+0
-0
mogs RE: Sun Java JRE 1.6.x / 6.x
Expert Contributor 17th Jun, 2010 08:26
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
I'm getting the same result when clicking on the link today....the tech team have been informed.
Meanwhile, if yo go to the Programs section of the forum; fill in the field for vendor and prog.....Sun Microsystems and Java JRE 1.6 respectively....that will take you to all the threads concerning. Scroll down and look for those by Maurice Joyce. Hope that helps. Regards

--
Was this reply relevant?
+0
-0
Maurice Joyce RE: Sun Java JRE 1.6.x / 6.x
Handling Contributor 17th Jun, 2010 08:54
Score: 11736
Posts: 8,984
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I think this is what U are looking for:

JAVA PROBLEMS
=============


PART 1

STANDARD UPDATING OF JAVA
~~~~~~~~~~~~~~~~~~~~~~~~~~
Can be used with Windows XP,Vista & Windows 7 - 32 & 64 Bit Systems.

If U have but do not use a 64 Bit Browser there is no requirement for Java 64 to be installed.If already installed it can safely be removed via Control Panel>Add/Remove.

JAVA now use an Uninstaller as part of the install process. This makes updating very easy using this method.

1. [b]32 Bit Systems.


A.Go to Start>Control Panel>click on the JAVA icon>select the Update tab>click the Update Now button.
OR
B. Click this link:
http://www.java.com/en/download/manual.jsp (select 32 Bit)


1A. [64 Bit Systems.[/b] Click on this link:
http://www.java.com/en/download/manual.jsp (select 64 Bit)

Both 32 & 64 Bit downloads are available. Download/install them one at a time.

Notes:

U can use the 32 Bit browser to install the 64 Bit version.

To test your JAVA 32 Bit is working correctly use this test link:
http://java.com/en/download/help/testvm.xml

As normal,reboot,carry out a full PSI scan & all should be in order.

Secunia monitors both JAVA 32 & 64 Bit versions.

OPTIONAL EXTRA'S AFTER UPDATING
+++++++++++++++++++++++++++++++

1. Go to Control Panel>JAVA icon>Update Tab and take the tick out of box marked "Check for updates auto ....." (This will prevent a Java updater notification from starting each time U switch on your PC - PSI is already doing this job for U)

2. If U prefer not to have the JAVA icon in the System Tray when in use, open the Advanced Tab>look for Miscellaneous>click the + sign & then remove the tick from clearly marked box.

3. U may also wish to speed up your browser by clearing out the JAVA cache & permanently lowering the quota allocation. If U are unsure how to do this post back for more information.



++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++


PART 2

CLEARING OUT OLD JAVA DROSS (32 Bit)
~~~~~~~~~~~~~~~~~~~~~~~~~~~
If U have completed Part 1 & still have a problem it is because the new JAVA uninstaller only removes the previous version. U could still have very old JAVA dross on your system. Try this:

1.Install or double check U have the latest JAVA version (Currently Version 6 Update 20)from here:

http://www.java.com/en/download/manual.jsp (select 32 Bit)

http://www.java.com/en/download/manual.jsp (select 64 Bit)


2.This tool will remove all the old dross except for the version U have just installed. Click here:

http://raproducts.org/

*This link takes U to the site - select the Windows Binary (zip) option.
*This will lead U to Sourceforge.net to download it.
*Save the download to desktop.
*Activate the desktop zip icon which exposes the JAVARA EXE file. Click it
*Select RUN when asked.
*Select your language.
*The tool will now appear on the desktop - select REMOVE OLDER VERSIONS
*Once complete select ADDITIONAL TASKS - tick all boxes & activate.
*Right click on the desktop JAVARA zip file & delete it.

3.To test your JAVA is working correctly use this test link: http://java.com/en/download/help/testvm.xml

Revision 4

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+12
-0
bpsec09 RE: Sun Java JRE 1.6.x / 6.x
Member 17th Jun, 2010 12:48
Score: 0
Posts: 6
User Since: 27th Jun 2009
System Score: N/A
Location: N/A
Same here - got 6 notices for the same fix and each time you execute one the rest remain.
Was this reply relevant?
+0
-0

nuendel10

RE: Sun Java JRE 1.6.x / 6.x
[+]
This reply has been minimised due to a negative Relevancy Score.
Maurice Joyce RE: Sun Java JRE 1.6.x / 6.x
Handling Contributor 17th Jun, 2010 19:03
Score: 11736
Posts: 8,984
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@bpsec09 & nuendel10

U are not giving much information including whether U have tried the fix above.

U should both be aware that this thread was created by @tc uaine33 - he could lock it at any time & prevent any further postings.

Better U start your own threads which should include more details.

1. What OS are U using.
2. Is it 32 or 64 Bit? If 64 Bit have U got both versions of Java installed?
3. What are the paths to all the Java files listed by PSI?
4. Why are they false positives?

FINDING A VULNERABILITY FILE PATH
=================================

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum if U are unsure what to do next.

Revision 2



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+4
-0
tc_uaine33 RE: Sun Java JRE 1.6.x / 6.x
Member 17th Jun, 2010 22:26
Score: 0
Posts: 5
User Since: 28th Jul 2009
System Score: N/A
Location: US
I followed the link. Since I didn't know if I have a 32 or 64 bit browser, I clicked on the link to have Java check to see if it was working. Much to my surprise, it was working and up-to-date. There was more information on what to do if it was still a problem. It said to clear the cache. I did that and rescanned with Secunia. It came back fine! Thank you!
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability