Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service

Author: SCS team
type: dos
platform: java
port: 0
date_added: 2009-03-31
date_updated: 2014-04-14
verified: 1
codes: CVE-2009-1219;OSVDB-53181
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/34150/info

Sun Java System Calendar Server is prone to a denial-of-service vulnerability because it fails to handle certain duplicate URI requests.

An attacker can exploit this issue to crash the Calendar Server, resulting in a denial-of-service condition.

NOTE: Versions prior to Sun Java System Calendar Server 6.3 are not vulnerable.

The following example data is available:

https://www.example.com:3443/?tzid=crash