PT-2000-1982 · Apple · Ical

Publicado 2000-12-11 · Atualizado 2017-10-10 · CVE-2000-1074

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iCal version 2.1 Patch 2

Description The issue concerns the csstart program in the specified version of iCal, which uses relative pathnames to install certain libraries. This could potentially allow the icsuser account to gain root privileges by creating a malicious library in the current or parent directory.

Recommendations For iCal version 2.1 Patch 2, consider restricting the privileges of the icsuser account to prevent potential exploitation, and ensure that all library installations use absolute pathnames to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-1074

Produtos afetados

Ical

Referências · 6

• 🔥 https://exploit-db.com/exploits/20276 · Exploit
• 🔥 http://securityfocus.com/bid/1769 · Exploit
• 🔥 http://atstake.com/research/advisories/2000/a100900-1.txt · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5757 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1074 · Nota de Segurança
• http://osvdb.org/7209 · Nota