• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Is it a security risk to instal Java Virtual Machine on a web-server?

As far as I know it isn't. Especially when you consider that most middleware today is written in Java (IBM's WebSphere, Sun's iPlanet, BEA's WebLogic, HP's BlueStone, etc.). These are the big boys of webservers, so I think that you should be ok. But by all means, you should try to find out any info on possible security holes.
 
I haven't found too much on JRE exploits but just in case we created a special java user that can run java.exe, admins can't even run it. We also put the libs and bin files in an obscure location as well as not defined it in the env variables.

Therefore to run a java file in an ASP shell you have to run "runas.exe" and hard code the classpath and bin path variables when executing the .class file.
 
Back
Top