Ghosts of Java Haunt Users

[ronjor]

{QUOTE-> Sun Microsystems has issued updates for its ubiquitous Java software to plug multiple security holes. Of particular interest in this bundle is a fix that prevents attackers from exploiting vulnerabilities in older versions of the software.

Why is this a big deal, you ask? Aren't patches designed to fix vulnerabilities in older versions of the software? Well, yes, but as Security Fix has lamented time and again, Sun's updates are notorious for leaving older versions of the software lying all over the user's machine. <-QUOTE}Brian Krebs (http://blog.washingtonpost.com/securityfix/2008/07/remnant_java_versions_again_po.html)

[Arup]

Always a good idea to remove older versions and then install, technically the installer should be doing that but as seen, its not so.

[lordpake]

And technically the updater should also pull the latest version but that too isn't happening :D

[ccsito]

Sun Microsystems follow the mantra - Here is the software, you agree to the terms and conditions and install it, whatever existed before the install is your personal business and problem. Some other software firms do actually replace the new version and remove the previous one. But they don't have any obligation to do so. You wonder what all of the these MS patches are actually doing to your OS program. :doubt:

[ronjor]

JavaRa 1.09 {QUOTE-> JavaRa is a simple tool that does a simple job: it removes old and redundant versions of the Java Runtime Environment (JRE).

Java software in general and the Java JRE in particular allow you to run applications called ‘applets’ that are written in the Java programming language. You probably have Java JRE installed on your computer because these applets allow you to play online games, chat with people around the world, calculate your mortgage interest, view images in 3D, as well as many others.

Java and Java Runtime Environment (JRE) are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. <-QUOTE}http://www.majorgeeks.com/download5967.html

[ccsito]

What every software product should do is to reside in one place on your file system and then you wipe out that one location. Unfortunately, it can't be that simple because many programs have to be embedded into the OS setting information. Sun Microsystems must write code that allows several program versions to coexist at the same time. I wonder why AV and firewall writers can't do the same? ::)