PT-2004-1822 · Sun · Sun Java System Portal Server

Published 2004-07-23 · Updated 2017-07-11 · CVE-2004-0742

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java System Portal Server version 6.2

Description The issue allows remote authenticated users to gain Calendar Server privileges and modify Calendar data. This is achieved by changing the display options to a non-default view.

Recommendations For Sun Java System Portal Server version 6.2, consider restricting access to the display options feature to prevent unauthorized modification of Calendar data. As a temporary workaround, limit the ability of remote authenticated users to change display options to a non-default view until a fix is available.

Fix

Related Identifiers

CVE-2004-0742

Affected Products

Sun Java System Portal Server

References · 7

• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57586 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0742 · Security Note
• http://kb.cert.org/vuls/id/881254 · Note
• http://securityfocus.com/bid/10788 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0742 · Note
• http://secunia.com/advisories/12134 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16776 · Note