Multiple Vendor Java Virtual Machine Listening Socket Vulnerability

info
discussion
exploit
solution
references

Multiple Vendor Java Virtual Machine Listening Socket Vulnerability

Dan Brumleve <dan+security@brumleve.com> has released the exploit Brown Orifice (BOHTTPD-0.1.tar.gz).

Alexey Yarovinsky <aleshka@oltres.com> has set up the following demonstration page for Microsoft Internet Explorer:
http://www.oltres.com/ms-bug/

/data/vulnerabilities/exploits/BOHTTPD-0.1.tar.gz