Published: 01/04/2009 Updated: 10/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 up to and including 6.3-7.01 allows remote malicious users to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun java system calendar server 6
sun java system calendar server 6.3
sun one calendar server 6.0

source: wwwsecurityfocuscom/bid/34150/info Sun Java System Calendar Server is prone to a denial-of-service vulnerability because it fails to handle certain duplicate URI requests An attacker can exploit this issue to crash the Calendar Server, resulting in a denial-of-service condition NOTE: Versions prior to Sun Java System Calendar ...

CWE-20 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1 http://www.securityfocus.com/bid/34150 http://www.coresecurity.com/content/sun-calendar-express http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1 http://www.vupen.com/english/advisories/2009/0905 http://www.securityfocus.com/archive/1/502320/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32860/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-1219

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect