« Volver al listado

CVE-2009-1219

Estado: ModificadaMedia (5)—

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

SUN — Java System Calendar ServerSUN — ONE Calendar Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-1219",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-04-01T18:30:00.593",
  "references": [
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.coresecurity.com/content/sun-calendar-express",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/34150",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0905",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.coresecurity.com/content/sun-calendar-express",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/502320/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34150",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0905",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter."
    },
    {
      "lang": "es",
      "value": "Sun Calendar Express Web Server en Sun ONE Calendar Server v6.0 y Sun Java System Calendar Server 6 2004Q2 hasta 6.3-7.01 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de múltiples peticiones de la URI por defecto con caracteres alfabéticos en el parámetro \"tzid\"."
    }
  ],
  "lastModified": "2026-06-16T23:06:47.770",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C2387AF-026B-423B-A396-55034DC984A4"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E54204FF-DAA2-4D25-91CA-78DC271C35BD"
            },
            {
              "criteria": "cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E04C0F4E-6825-4EED-994F-4FACCABD4670"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65EA6495-81BA-4124-82AB-C81AB94E2F9A"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "382FDFCA-95D8-4A57-8114-B7B3C939DD73"
            },
            {
              "criteria": "cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF8C61E6-7EF3-4069-8335-1D11B86B31D2"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E60435B-947E-4579-B4D5-3BB3A858D8C2"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D377C48F-4513-467B-8514-5F7F27071A41"
            },
            {
              "criteria": "cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B17A5EA-6081-4229-B792-5EE18458BB9A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}