Sun Security Advisory – A security vulnerability in Sun Java System Portal Server Software 6.2 may allow a user to gain Calendar Server administrator credentials if the user changes the display options to select a non-default view. With these credentials, a user’s session has unrestricted access to the calendar data and hence manipulation of that data. Such manipulation could include, but is not limited to: the deletion, creation, and modification of users, user information, calendar entries, and historical data.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33865/57586.html
Source: https://packetstormsecurity.com/files/33865/57586.html.html