CVE-2009-1219

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*
cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*
cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*
cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*
cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*
cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*
cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*

History

21 Nov 2024, 01:01

Type Values Removed Values Added
References () http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1 - Patch, Vendor Advisory () http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1 - Patch, Vendor Advisory
References () http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1 -
References () http://www.coresecurity.com/content/sun-calendar-express - Exploit () http://www.coresecurity.com/content/sun-calendar-express - Exploit
References () http://www.securityfocus.com/archive/1/502320/100/0/threaded - () http://www.securityfocus.com/archive/1/502320/100/0/threaded -
References () http://www.securityfocus.com/bid/34150 - Exploit () http://www.securityfocus.com/bid/34150 - Exploit
References () http://www.vupen.com/english/advisories/2009/0905 - () http://www.vupen.com/english/advisories/2009/0905 -

Information

Published : 2009-04-01 18:30

Updated : 2024-11-21 01:01


NVD link : CVE-2009-1219

Mitre link : CVE-2009-1219

CVE.ORG link : CVE-2009-1219


JSON object : View

Products Affected

sun

  • java_system_calendar_server
  • one_calendar_server
CWE
CWE-20

Improper Input Validation