CVE-2000-1072 iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with...
HighCVSS 7.2
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape iplanet ical | = 2.1-patch2 | No fix listed |
References
- A100900-1 exploit patch vendor-advisory
- 7212 vdb-entry
- 1768 exploit patch vdb-entry vendor-advisory
- ical-iplncal-gain-access(5756) vdb-entry