Vulnerabilities > CVE-2000-1074 - Unspecified vulnerability in Netscape Iplanet Ical 2.1

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
netscape
critical
exploit available
NVD
Published: 2000-12-11
Updated: 2017-10-10

Summary

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.

Vulnerable Configurations

Part Description Count
Application
Netscape
1

Exploit-Db

descriptionNetscape iCal 2.1 Patch2 iPlanet iCal 'csstart' Vulnerability. CVE-2000-1074. Local exploit for solaris platform
idEDB-ID:20276
last seen2016-02-02
modified2000-10-10
published2000-10-10
reporter@stake
sourcehttps://www.exploit-db.com/download/20276/
titleNetscape iCal 2.1 Patch2 iPlanet iCal 'csstart' Vulnerability

References