Sun Java System Calendar Server重复URI请求拒绝服务漏洞

BUGTRAQ ID: 34150 CVECAN ID: CVE-2009-1219 Sun Java System Calendar Server是Sun Java System通信套件中的日程服务器组件。 如果远程攻击者向Calendar Server连续两次发送特制的HTTP请求并在tzid参数中设置了字母字符的话，就会导致Calendar Server进程崩溃，可能留下类似于以下栈追踪的崩溃dump，具体取决于系统配置： $ pstack core ... ... ----------------- lwp 4 / thread 4 --------------------...

CVE-2009-1219

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service daemon crash via multiple requests to the default URI with alphabetic characters in the tzid parameter...

CVE-2009-1219

Summary (CVE-2009-1219) Sun Calendar Express Web Server (Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6, 2004Q2–6.3-7.01) is affected. A remote attacker can cause a denial of service (daemon crash) by sending two consecutive crafted HTTP requests with alphabetic characters in t...

Solaris 9 (x86) : 121658-54

Calendar Server SunOS 5.9x86 5.10x86: Core patch. Date this patch was last updated by Sun : Aug/14/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 9 (sparc) : 121657-54

Calendar Server SunOS 5.9 5.10: Core patch. Date this patch was last updated by Sun : Aug/14/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...