Re: Java 7-15 failures.

2013-02-26 Thread Andrew S. Baker
Have no fear: at the rate that Java exploits and vulnerabilities are being
found in Java, they'll be providing more updates shortly.  Maybe they'll
fix that problem, or maybe more people will get the impetus to work around
them.





*ASB
**http://XeeMe.com/AndrewBaker* http://xeeme.com/AndrewBaker*
**Providing Virtual CIO Services (IT Operations  Information Security) for
the SMB market…***





On Mon, Feb 25, 2013 at 9:31 PM, Jon Harris jk.har...@live.com wrote:

  I am having similar issues.  I just wish I did not need this crapware for
 work.

 Jon

  From: kennedy...@elyriaschools.org
  To: ntsysadmin@lyris.sunbelt-software.com

  Subject: RE: Java 7-15 failures.
  Date: Mon, 25 Feb 2013 17:23:12 +

 
  I am seeing the IE activation issue on multiple machines myself when I
 get the exe to work.
 
  -Original Message-
  From: Sam Cayze [mailto:sca...@gmail.com]
  Sent: Monday, February 25, 2013 12:20 PM
  To: NT System Admin Issues
  Subject: RE: Java 7-15 failures.
 
  No issues with the actual installer... But I'm having a heck of time
 having the IE pluggin actually work after an upgrade. It's getting tiresome
 trying to fix this after each update. IE says the add-on is enabled and all
 that jazz. But no Java will actually load in IE. Haven't pinpointed the
 actually fix yet, but it usually requires a mix of rebooting, disabling,
 re-enabling plugins, and re-installing java.
 
 
  -Original Message-
  From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
  Sent: Friday, February 22, 2013 3:14 PM
  To: NT System Admin Issues
  Subject: RE: Java 7-15 failures.
 
  Not sure how to say this...but glad to hear that. So it isn't just me,
 there are others. So there is hope Java will release a fixed patch.
 
  -Original Message-
  From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
  Sent: Friday, February 22, 2013 3:55 PM
  To: NT System Admin Issues
  Subject: RE: Java 7-15 failures.
 
  Ditto here, sigh...
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
  ---
  To manage subscriptions click here:
  http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
 
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
  ---
  To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 
  ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
  ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
 
  ---
  To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
  or send an email to listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe ntsysadmin
 

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Java 7-15 failures.

2013-02-26 Thread Ziots, Edward
So true ASB


Hello All,



We had yet another look into Oracle's Java SE 7 software that was released by 
the company on Feb 19, 2013. As a result, we have discovered two new security 
issues (numbered 54 and 55), which when combined together can be successfully 
used to gain a complete Java security sandbox bypass in the environment of Java 
SE 7 Update 15 (1.7.0_15-b03).



Following our Disclosure Policy [1], we provided Oracle with a brief technical 
description of the issues found along with a working Proof of Concept code that 
illustrates their impact.



Both new issues are specific to Java SE 7 only. They allow to abuse the 
Reflection API in a particularly interesting way.



Without going into further details, everything indicates that a ball is in 
Oracle's court. Again.



Thank you.



Best Regards

Adam Gowdiak



-

Security Explorations

http://www.security-explorations.com

We bring security research to the new level

-



References:

[1] Security Explorations - Disclosure Policy

 http://www.security-explorations.com/en/disclosure-policy.html




Edward E. Ziots, CISSP, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org

This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]


From: Andrew S. Baker [mailto:asbz...@gmail.com]
Sent: Tuesday, February 26, 2013 8:46 AM
To: NT System Admin Issues
Subject: Re: Java 7-15 failures.

Have no fear: at the rate that Java exploits and vulnerabilities are being 
found in Java, they'll be providing more updates shortly.  Maybe they'll fix 
that problem, or maybe more people will get the impetus to work around them.






ASB
http://XeeMe.com/AndrewBakerhttp://xeeme.com/AndrewBaker
Providing Virtual CIO Services (IT Operations  Information Security) for the 
SMB market...




On Mon, Feb 25, 2013 at 9:31 PM, Jon Harris 
jk.har...@live.commailto:jk.har...@live.com wrote:
I am having similar issues.  I just wish I did not need this crapware for work.

Jon

 From: kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org
 To: 
 ntsysadmin@lyris.sunbelt-software.commailto:ntsysadmin@lyris.sunbelt-software.com

 Subject: RE: Java 7-15 failures.
 Date: Mon, 25 Feb 2013 17:23:12 +


 I am seeing the IE activation issue on multiple machines myself when I get 
 the exe to work.

 -Original Message-
 From: Sam Cayze [mailto:sca...@gmail.commailto:sca...@gmail.com]
 Sent: Monday, February 25, 2013 12:20 PM
 To: NT System Admin Issues
 Subject: RE: Java 7-15 failures.

 No issues with the actual installer... But I'm having a heck of time having 
 the IE pluggin actually work after an upgrade. It's getting tiresome trying 
 to fix this after each update. IE says the add-on is enabled and all that 
 jazz. But no Java will actually load in IE. Haven't pinpointed the actually 
 fix yet, but it usually requires a mix of rebooting, disabling, re-enabling 
 plugins, and re-installing java.


 -Original Message-
 From: Kennedy, Jim 
 [mailto:kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org]
 Sent: Friday, February 22, 2013 3:14 PM
 To: NT System Admin Issues
 Subject: RE: Java 7-15 failures.

 Not sure how to say this...but glad to hear that. So it isn't just me, there 
 are others. So there is hope Java will release a fixed patch.

 -Original Message-
 From: Joseph L. Casale 
 [mailto:jcas...@activenetwerx.commailto:jcas...@activenetwerx.com]
 Sent: Friday, February 22, 2013 3:55 PM
 To: NT System Admin Issues
 Subject: RE: Java 7-15 failures.

 Ditto here, sigh...
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin


 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 
 listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin



 ~ Finally, powerful endpoint security

RE: Java 7-15 failures.

2013-02-25 Thread Sam Cayze
No issues with the actual installer...  But I'm having a heck of time having
the IE pluggin actually work after an upgrade.  It's getting tiresome trying
to fix this after each update.  IE says the add-on is enabled and all that
jazz.  But no Java will actually load in IE.  Haven't pinpointed the
actually fix yet, but it usually requires a mix of rebooting, disabling,
re-enabling plugins, and re-installing java.  


-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Friday, February 22, 2013 3:14 PM
To: NT System Admin Issues
Subject: RE: Java 7-15 failures.

Not sure how to say this...but glad to hear that. So it isn't just me, there
are others. So there is hope Java will release a fixed patch.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Friday, February 22, 2013 3:55 PM
To: NT System Admin Issues
Subject: RE: Java 7-15 failures.

Ditto here, sigh...
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Java 7-15 failures.

2013-02-25 Thread Kennedy, Jim
I am seeing the IE activation issue on multiple machines myself when I get the 
exe to work.

-Original Message-
From: Sam Cayze [mailto:sca...@gmail.com] 
Sent: Monday, February 25, 2013 12:20 PM
To: NT System Admin Issues
Subject: RE: Java 7-15 failures.

No issues with the actual installer...  But I'm having a heck of time having 
the IE pluggin actually work after an upgrade.  It's getting tiresome trying to 
fix this after each update.  IE says the add-on is enabled and all that jazz.  
But no Java will actually load in IE.  Haven't pinpointed the actually fix yet, 
but it usually requires a mix of rebooting, disabling, re-enabling plugins, and 
re-installing java.  


-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: Friday, February 22, 2013 3:14 PM
To: NT System Admin Issues
Subject: RE: Java 7-15 failures.

Not sure how to say this...but glad to hear that. So it isn't just me, there 
are others. So there is hope Java will release a fixed patch.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Friday, February 22, 2013 3:55 PM
To: NT System Admin Issues
Subject: RE: Java 7-15 failures.

Ditto here, sigh...
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Java 7-15 failures.

2013-02-25 Thread Jon Harris

I am having similar issues.  I just wish I did not need this crapware for work. 
Jon
  From: kennedy...@elyriaschools.org
 To: ntsysadmin@lyris.sunbelt-software.com
 Subject: RE: Java 7-15 failures.
 Date: Mon, 25 Feb 2013 17:23:12 +
 
 I am seeing the IE activation issue on multiple machines myself when I get 
 the exe to work.
 
 -Original Message-
 From: Sam Cayze [mailto:sca...@gmail.com] 
 Sent: Monday, February 25, 2013 12:20 PM
 To: NT System Admin Issues
 Subject: RE: Java 7-15 failures.
 
 No issues with the actual installer...  But I'm having a heck of time having 
 the IE pluggin actually work after an upgrade.  It's getting tiresome trying 
 to fix this after each update.  IE says the add-on is enabled and all that 
 jazz.  But no Java will actually load in IE.  Haven't pinpointed the actually 
 fix yet, but it usually requires a mix of rebooting, disabling, re-enabling 
 plugins, and re-installing java.  
 
 
 -Original Message-
 From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
 Sent: Friday, February 22, 2013 3:14 PM
 To: NT System Admin Issues
 Subject: RE: Java 7-15 failures.
 
 Not sure how to say this...but glad to hear that. So it isn't just me, there 
 are others. So there is hope Java will release a fixed patch.
 
 -Original Message-
 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
 Sent: Friday, February 22, 2013 3:55 PM
 To: NT System Admin Issues
 Subject: RE: Java 7-15 failures.
 
 Ditto here, sigh...
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
 http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~
 
 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin
 
  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Java 7-15 failures.

2013-02-22 Thread Kennedy, Jim
Anyone else having issues going from 13 to 15. It seems either the 13 installer 
or the 15 installer is horribly messed up. I am getting all kinds of errors 
trying to install via gpo, the exe or via the website no matter what I do. On 
lots of machines, some of them pristine new images. All my old install points 
are still available.

Stuff like this, notice the messed up extra \ in the path.

There was a problem starting c:\program files(x86)\java\jre7\bin\\installer.dll

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Java 7-15 failures.

2013-02-22 Thread Miller Bonnie L .
I've only done manual updates on servers using the redistributable .exe (the 
one you can get as a full download if you sign up for it), and have not had any 
issues like that so far.  Not running it as a deployment of any kind 
though--these are installed by hand, some in TS/RDS mode.

-Original Message-
From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] 
Sent: Friday, February 22, 2013 6:57 AM
To: NT System Admin Issues
Subject: Java 7-15 failures.

Anyone else having issues going from 13 to 15. It seems either the 13 installer 
or the 15 installer is horribly messed up. I am getting all kinds of errors 
trying to install via gpo, the exe or via the website no matter what I do. On 
lots of machines, some of them pristine new images. All my old install points 
are still available.

Stuff like this, notice the messed up extra \ in the path.

There was a problem starting c:\program files(x86)\java\jre7\bin\\installer.dll

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Java 7-15 failures.

2013-02-22 Thread S Powell
yep, I've been doing the GPO install and had a fair number of failures
going from 13 - 15 as well.

I've had to go around and redo the installs.



-
Sub ubi semper ubi


On Fri, Feb 22, 2013 at 6:56 AM, Kennedy, Jim
kennedy...@elyriaschools.org wrote:
 Anyone else having issues going from 13 to 15. It seems either the 13 
 installer or the 15 installer is horribly messed up. I am getting all kinds 
 of errors trying to install via gpo, the exe or via the website no matter 
 what I do. On lots of machines, some of them pristine new images. All my old 
 install points are still available.

 Stuff like this, notice the messed up extra \ in the path.

 There was a problem starting c:\program 
 files(x86)\java\jre7\bin\\installer.dll

 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
 ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Java 7-15 failures.

2013-02-22 Thread Charles Figueiredo
On Fri, 22 Feb 2013 14:56:57 +, Kennedy, Jim wrote:

Anyone else having issues going from 13 to 15. It seems either 
the 13 installer or the 15 installer is horribly messed up. I 
am getting all kinds of errors trying to install via gpo, the 
exe or via the website no matter what I do. On lots of 
machines, some of them pristine new images. All my old install 
points are still available.

Stuff like this, notice the messed up extra \ in the path.

There was a problem starting c:\program files(x86)\java\jre7
\bin\\installer.dll

No problems here Jim.

Regards, 
Charles


~ Finally, powerful endpoint security that ISN'T a resource 
hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  


---
To manage subscriptions click here: http://lyris.sunbelt-
software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


Regards,
Charles

---
   Charles Figueiredo PhD 
   Integrated Solutions - Enhancing Small Business Systems
---



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


RE: Java 7-15 failures.

2013-02-22 Thread Kennedy, Jim
Not sure how to say this...but glad to hear that. So it isn't just me, there 
are others. So there is hope Java will release a fixed patch.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Friday, February 22, 2013 3:55 PM
To: NT System Admin Issues
Subject: RE: Java 7-15 failures.

Ditto here, sigh...
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin