The Sun Java Web Server for Solaris and NT allows a remote attacker to execute arbitrary commands on the target system.