Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16776
http://www.securityfocus.com/bid/10788
http://www.kb.cert.org/vuls/id/881254
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57586