Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges.
http://www.securityfocus.com/bid/13958
http://www.securityfocus.com/bid/13945
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1