CVE-2003-1229

no score yetEPSS 4.6%

No CVSS score yet. EPSS 4.6% chance of exploitation in the next 30 days.

X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.

EPSS: 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2003-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:jre
sun:java_web_start
sun:jsse

References

http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html
http://java.sun.com/products/jsse/CHANGES.txt
http://secunia.com/advisories/7943
http://securitytracker.com/id?1006007
http://securitytracker.com/id?1007483

Check your stack JSON