CVE-2009-1219: Input Validation
Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1219?
CVE-2009-1219 is classified as a denial of service vulnerability that can crash the Sun Calendar Express Web Server.
How do I fix CVE-2009-1219?
To fix CVE-2009-1219, update your Sun Calendar Server to a patched version that resolves the vulnerability.
What versions are affected by CVE-2009-1219?
CVE-2009-1219 affects Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server versions 6.0, 6, and 6.3.
Can CVE-2009-1219 be exploited remotely?
Yes, CVE-2009-1219 can be exploited remotely by sending multiple requests to the default URI with specific parameters.
What are the impacts of CVE-2009-1219?
The impact of CVE-2009-1219 is a denial of service, resulting in the crashing of the server, which affects availability.