jdk -- jar directory traversal vulnerability

Pluf has discovered a vulnerability in Sun Java JDK/SDK,
which potentially can be exploited by malicious people to
compromise a user’s system.

The jar tool does not check properly if the files to be
extracted have the string “…/” on its names, so it’s
possible for an attacker to create a malicious jar file in
order to overwrite arbitrary files within the filesystem.