First you'll have to modify the server.policy to allow local file access from the web application (or you could brute-force disable the security manager). Disabling the security manager is not recommended, but if you're just prototyping, it's quick to do.
Then you should be able to write files to the appserver's filesystem.
[Message sent by forum member 'madgame' (madgame)]
http://forums.java.net/jive/thread.jspa?messageID=272882