Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-1219

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.0MEDIUM
EPSS
10.4%
top 6.79%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
SUN Java System Calendar ServerSUN ONE Calendar Server
Timeline
PublishedApr 1
Latest updateMay 2

Description

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cmp3-fqpg-7rmx: Sun Calendar Express Web Server in Sun ONE Calendar Server 6↗2022-05-02
▶
CVEList
CVE-2009-1219: Sun Calendar Express Web Server in Sun ONE Calendar Server 6↗2009-04-01
▶

💥Exploits & PoCs

1
Exploit-DB
Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service↗2009-03-31
▶