Vulnerability Development mailing list archives

JavaSecurity


From: r s <richard.scott () bestbuy com>
Date: 12 Mar 2002 19:14:44 -0000



I am trying to replace a class in Java's runtime rt.jar 
file.

I compiled the rogue class, placed it in the extracted 
jar file with zero compression.

now when I compile code aginst it I get:

C:\>javac -classpath ../../.. String.java
Error occurred during initialization of VM
java/lang/NoClassDefFoundError: java/lang/Object

This "exploit" was tailored around what Scott Oaks 
mentioned in his book JavaSecurity.

however, I seem not to be able to exploit it.

Any tips?


Current thread: