CVE

Id
38654  
CVE No.
CVE-2009-1219  
Status
Candidate  
Description
Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.  
Phase
Assigned (20090401)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423303 38654 CVE-2009-1219 BUGTRAQ:20090331 CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server  View
423304 38654 CVE-2009-1219 URL:http://www.securityfocus.com/archive/1/archive/1/502320/100/0/threaded  View
423305 38654 CVE-2009-1219 MISC:http://www.coresecurity.com/content/sun-calendar-express  View
423306 38654 CVE-2009-1219 SUNALERT:256228  View
423307 38654 CVE-2009-1219 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1  View
423308 38654 CVE-2009-1219 SUNALERT:255008  View
423309 38654 CVE-2009-1219 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1  View
423310 38654 CVE-2009-1219 BID:34150  View
423311 38654 CVE-2009-1219 URL:http://www.securityfocus.com/bid/34150  View
423312 38654 CVE-2009-1219 VUPEN:ADV-2009-0905  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42310 JVNDB-2009-003317 aspWebCalendar Free Edition におけるデータベースをダウンロードされる脆弱性 aspWebCalendar Free Edition には、不十分なアクセスコントロールで Web のルート配下に重要情報を保存されるため、ユーザ資格情報を含むデータベースをダウンロードされる脆弱性が存在します。 CVE-2009-1223 38654 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003317.html  View