CVE-2000-1071 The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
HighCVSS 10.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape iplanet ical | = 2.1-patch2 | No fix listed |
References
- A100900-1 exploit patch vendor-advisory
- 7213 vdb-entry
- 1767 vdb-entry
- ical-xhost-gain-privileges(5752) vdb-entry