Various Java development kits all suffer from a jar tool directory traversal vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37150/7a69Adv23.txt
Source: https://packetstormsecurity.com/files/37150/7a69ezine-Advisory-23.html