Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service

Author: SCS team
type: dos
platform: java
port: 
date_added: 2009-03-31 
date_updated: 2014-04-14 
verified: 1 
codes: CVE-2009-1219;OSVDB-53181 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/34150/info

Sun Java System Calendar Server is prone to a denial-of-service vulnerability because it fails to handle certain duplicate URI requests.

An attacker can exploit this issue to crash the Calendar Server, resulting in a denial-of-service condition.

NOTE: Versions prior to Sun Java System Calendar Server 6.3 are not vulnerable.

The following example data is available:

https://www.example.com:3443/?tzid=crash