critical10.0Public exploit code
CVE-2000-1074
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netscape iCal 2.1 Patch2 - iPlanet iCal 'csstart' Local Privilege Escalation2000-10-10 · local · solaris · Verified
Impact
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netscape | Iplanet Ical | Version 2.1 |
References
- NVD record
- CVE.org record
- http://www.atstake.com/research/advisories/2000/a100900-1.txt
- http://www.osvdb.org/7209
- http://www.securityfocus.com/bid/1769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5757
- http://www.atstake.com/research/advisories/2000/a100900-1.txt
- http://www.osvdb.org/7209
- http://www.securityfocus.com/bid/1769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5757