Sun has finally released a patch for the Apache vulnerability:

http://sunsolve.sun.com/patches/cobalt/raq4.eng.html