I have this problem too - it started after the last OS X update which included a Java security fix.
In Console, the firewall log keeps reiterating
"imac.local socketfilterfw[102] <Info>: java is listening from :::0 proto 6"
iMac:~ rick$ ps -ef | grep ja[v]a
0 107 1 0 11:01pm ?? 0:01.60 /usr/sbin/xtendsan/iscsid -d -J-Djava.security.policy=/usr/sbin/xtendsan/iscsid.sec -J-Dcom.attotech.iscsid.discovery.verbose=true --J-Dcom.attotech.iscsid.logLevel=VERBOSE --J-Dcom.attotech.iscsid.discovery.MaxRecvDataSegmentLength=512 --J-Dcom.attotech.iscsid.discovery.AllowPaddedDSL=true
iMac:~ rick$ ps -ef | grep 1[0]2
0 102 1 0 11:01pm ?? 0:15.88 /usr/libexec/ApplicationFirewall/socketfilterfw
What I can't work out is which application is trying to run java in the first place. It's almost as if the Firewall is trying to auto-accept the java process, and then failing.
I've seen a supposed workaround where you manually sign the java binary (more command line wizardry), but this didn't work for me. The only java I have installed is the latest JDK 1.6 from the Apple Developer site (I definitely don't have Oracle JRE 7 installed).
So far, the only workarounds I have (in decreasing order of acceptability) are:
1. Completely remove Java from your computer
2. Disable your firewall.
Any ideas?