Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2003-1229 Details

Description

X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html	CVE	Broken Link
http://java.sun.com/products/jsse/CHANGES.txt	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/7943	CVE	Broken LinkPatchVendor Advisory
http://securitytracker.com/id?1006007	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://securitytracker.com/id?1007483	CVE	Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11182	CVE	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5883	CVE	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1	CVE	Broken LinkPatchVendor Advisory
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0301-239	CVE	Broken Link
http://www.securityfocus.com/bid/6682	CVE	Broken LinkPatchThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1006001	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html	[email protected]	Broken Link
http://java.sun.com/products/jsse/CHANGES.txt	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/7943	[email protected]	Broken LinkPatchVendor Advisory
http://securitytracker.com/id?1006007	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://securitytracker.com/id?1007483	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11182	[email protected]	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5883	[email protected]	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1	[email protected]	Broken LinkPatchVendor Advisory
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0301-239	[email protected]	Broken Link
http://www.securityfocus.com/bid/6682	[email protected]	Broken LinkPatchThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1006001	[email protected]	Broken LinkThird Party AdvisoryVDB Entry

see all 22 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-295	Improper Certificate Validation	[email protected]

Affected Products

Product	Versions
oracle jre	>= 1.3.0, <= 1.4.1
CPE cpe:2.3:a:oracle:jre:::::::: Remediation No remediation found in references.
sun java web start	>= 1.0, <= 1.2
CPE cpe:2.3:a:sun:java_web_start:::::::: Remediation No remediation found in references.
sun jsse	1.0.3
CPE cpe:2.3:a:sun:jsse:1.0.3:::::::* Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 9, 2024	Reanalysis	[email protected]
Sep 13, 2022	Modified Analysis	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
Sep 7, 2005	Initial Analysis	[email protected]

CVE-2003-1229 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO