CVE-2008-2749 Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote atta...
HighCVSS 7.1
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system calendar server | = 6-2004q2 | No fix listed |
| sun java system calendar server | = 6-2005q1 | No fix listed |
| sun java system calendar server | = 6-2005q4 | No fix listed |
| sun java system calendar server | = 6.3 | No fix listed |
| sun one calendar server | = 6.0 | No fix listed |
References
- 30694 third-party-advisory vendor-advisory
- 235521 patch vendor-advisory
- 29763 vdb-entry
- 1020299 vdb-entry
- ADV-2008-1857 vdb-entry
- sun-java-systemcalendarserver-dos(43127) vdb-entry