JRE/JDK sandbox breaking

2003-10-2300:00:00

BUGTRAQ

vulners.com

By using / instead of . in class name it's possible to bypass sandbox restrictions.

CPENameOperatorVersion
jdkeq1.4
jreeq1.4

CPE	Name	Operator	Version
	jdk	eq	1.4
	jre	eq	1.4

References

vulners.com/securityvulns/securityvulns:doc:5285