high7.2Public exploit code
CVE-2000-1072
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netscape iCal 2.1 Patch2 - iPlanet iCal 'iplncal.sh' Permissions2000-10-10 · local · solaris · Verified
Impact
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netscape | Iplanet Ical | Version 2.1 |
References
- NVD record
- CVE.org record
- http://www.atstake.com/research/advisories/2000/a100900-1.txt
- http://www.osvdb.org/7212
- http://www.securityfocus.com/bid/1768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5756
- http://www.atstake.com/research/advisories/2000/a100900-1.txt
- http://www.osvdb.org/7212
- http://www.securityfocus.com/bid/1768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5756