CVE-2000-0889: Two Sun security certificates have been compromised, which could allow attackers to insert malicious code s...

Security readout for executives and security teams

This CVE concerns two compromised Sun security certificates. An attacker could make malicious code, such as a Java applet, appear to be signed by Sun. The bundle does not identify affected products, a CVSS score, or active exploitation. Likely exposure is limited to environments that still trust the compromised Sun certificates or allow legacy signed Java applets/code paths. The provided affected-product data is listed as n/a, so product-level exposure cannot be determined from this bundle alone. Prioritize as legacy trust-risk cleanup. It is urgent only if business systems still rely on affected Sun certificate trust or legacy applet execution; otherwise track as a compliance and hardening item. Mitigation focus: Review Sun advisory 00198 and CERT CA-2000-19 for named certificate handling guidance.; Remove or distrust the compromised certificates if vendor guidance directs it.; Disable legacy signed applet execution where it is not business-critical..

Prepared

Jul 1, 2026, 09:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.