PT-2000-1982 · Apple · Ical

Published 2000-12-11 · Updated 2017-10-10 · CVE-2000-1074

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iCal version 2.1 Patch 2

Description The issue concerns the csstart program in the specified version of iCal, which uses relative pathnames to install certain libraries. This could potentially allow the icsuser account to gain root privileges by creating a malicious library in the current or parent directory.

Recommendations For iCal version 2.1 Patch 2, consider restricting the privileges of the icsuser account to prevent potential exploitation, and ensure that all library installations use absolute pathnames to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-1074

Affected Products

Ical

References · 6

• 🔥 https://exploit-db.com/exploits/20276 · Exploit
• 🔥 http://securityfocus.com/bid/1769 · Exploit
• 🔥 http://atstake.com/research/advisories/2000/a100900-1.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1074 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5757 · Note
• http://osvdb.org/7209 · Note