CVE Feed

    Dashboard / CVE / CVE-2003-1229

    CVE-2003-1229

    X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.

    Published:Dec 31, 2003
    Last Modified:Apr 16, 2026
    EPS:Aug 17, 2005
    EPSS Score:0.01293
    CVSS Score:7.5

    Affected Products

    Vendor
    Oracle
    Product
    Jre
    Vendor
    Sun
    Product
    Java Web Start
    Vendor
    Sun
    Product
    Jsse

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2026-62574 (CVSS 7.8) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-47013 (CVSS 5.3) — Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java S…
    CVE-2026-47021 (CVSS 5.3) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-22003 (CVSS 6) — Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H…
    CVE-2026-34268 (CVSS 2.9) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-22018 (CVSS 3.7) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-22013 (CVSS 5.3) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-34282 (CVSS 7.5) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-22021 (CVSS 5.3) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…
    CVE-2026-22007 (CVSS 2.9) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac…

    References

    http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html
    http://java.sun.com/products/jsse/CHANGES.txt
    http://secunia.com/advisories/7943
    http://securitytracker.com/id?1006007
    http://securitytracker.com/id?1007483
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1
    http://www.securityfocus.com/bid/6682
    http://www.securitytracker.com/id?1006001
    http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0301-239
    https://exchange.xforce.ibmcloud.com/vulnerabilities/11182
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5883
    http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html
    http://java.sun.com/products/jsse/CHANGES.txt
    http://secunia.com/advisories/7943
    http://securitytracker.com/id?1006007
    http://securitytracker.com/id?1007483
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1
    http://www.securityfocus.com/bid/6682
    http://www.securitytracker.com/id?1006001
    http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0301-239
    https://exchange.xforce.ibmcloud.com/vulnerabilities/11182
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5883

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High