Re: Re: applet security

[test.future () gmail com]

I finally found what our auditor based on: http://www.isaca-sacramento.org/seminarinfo/WebServerAuditProgram.doc. 

In section 11B, it writes:
Applets Implication: Exposure  to buffer overflow and environment attacks;

Verify that the use of applets is restriced only to development networks and not permitted on operational networks.

Please share your thought on this, thanks a lot.

-------------------------------------------------------------------------
This List Sponsored by: Watchfire

Watchfire's AppScan is the industry's first and leading web application 
security testing suite, and the only solution to provide comprehensive 
remediation tasks at every level of the application. See for yourself. 
Download AppScan 6.0 today.

https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------