CVE-2009-1219 - Vulnerability Details - OpenCVE

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.11059.

Key SSVC decision points have not yet been added.

Vendors	Products
Sun	Java System Calendar Server One Calendar Server

Configuration 1 [-]

OR	cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:::::*
	cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:::::*
	cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:::::*

Configuration 2 [-]

OR	cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:::::*
	cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:::::*
	cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:::::*

Configuration 3 [-]

OR	cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:::::*
	cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:::::*
	cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:::::*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1
http://www.coresecurity.com/content/sun-calendar-express
http://www.securityfocus.com/archive/1/502320/100/0/threaded
http://www.securityfocus.com/bid/34150
http://www.vupen.com/english/advisories/2009/0905

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-04-01T18:00:00

Updated: 2024-08-07T05:04:49.317Z

Reserved: 2009-04-01T00:00:00

Link: CVE-2009-1219

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-04-01T18:30:00.593

Modified: 2025-04-09T00:30:58.490

Link: CVE-2009-1219

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-31T00:00:00", "descriptions": [{"lang": "en", "value": "Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2009-0905", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0905"}, {"name": "256228", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1"}, {"name": "34150", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34150"}, {"name": "20090331 CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded"}, {"name": "255008", "tags": ["vendor-advisory", "x_refsource_SUNALERT"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1"}, {"tags": ["x_refsource_MISC"], "url": "http://www.coresecurity.com/content/sun-calendar-express"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-1219", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2009-0905", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0905"}, {"name": "256228", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1"}, {"name": "34150", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34150"}, {"name": "20090331 CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded"}, {"name": "255008", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1"}, {"name": "http://www.coresecurity.com/content/sun-calendar-express", "refsource": "MISC", "url": "http://www.coresecurity.com/content/sun-calendar-express"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:04:49.317Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2009-0905", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0905"}, {"name": "256228", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1"}, {"name": "34150", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34150"}, {"name": "20090331 CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded"}, {"name": "255008", "tags": ["vendor-advisory", "x_refsource_SUNALERT", "x_transferred"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.coresecurity.com/content/sun-calendar-express"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1219", "datePublished": "2009-04-01T18:00:00", "dateReserved": "2009-04-01T00:00:00", "dateUpdated": "2024-08-07T05:04:49.317Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*", "matchCriteriaId": "1C2387AF-026B-423B-A396-55034DC984A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*", "matchCriteriaId": "E54204FF-DAA2-4D25-91CA-78DC271C35BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*", "matchCriteriaId": "E04C0F4E-6825-4EED-994F-4FACCABD4670", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*", "matchCriteriaId": "65EA6495-81BA-4124-82AB-C81AB94E2F9A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*", "matchCriteriaId": "382FDFCA-95D8-4A57-8114-B7B3C939DD73", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*", "matchCriteriaId": "DF8C61E6-7EF3-4069-8335-1D11B86B31D2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*", "matchCriteriaId": "4E60435B-947E-4579-B4D5-3BB3A858D8C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*", "matchCriteriaId": "D377C48F-4513-467B-8514-5F7F27071A41", "vulnerable": true}, {"criteria": "cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*", "matchCriteriaId": "1B17A5EA-6081-4229-B792-5EE18458BB9A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter."}, {"lang": "es", "value": "Sun Calendar Express Web Server en Sun ONE Calendar Server v6.0 y Sun Java System Calendar Server 6 2004Q2 hasta 6.3-7.01 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) a trav\u00e9s de m\u00faltiples peticiones de la URI por defecto con caracteres alfab\u00e9ticos en el par\u00e1metro \"tzid\"."}], "id": "CVE-2009-1219", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-04-01T18:30:00.593", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1"}, {"source": "cve@mitre.org", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.coresecurity.com/content/sun-calendar-express"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/34150"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/0905"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.coresecurity.com/content/sun-calendar-express"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/34150"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/0905"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}