Lucene search

MitreCVE-2000-1073

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-1073

2001-01-2205:00:00

mitre

web.nvd.nist.gov

cve-2000-1073

ical 2.1 patch 2

root privileges

trojan horse cshttpd.

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.

Affected configurations

Nvd

Node

netscapeiplanet_icalMatch2.1patch2

VendorProductVersionCPE
netscapeiplanet_ical2.1cpe:2.3:a:netscape:iplanet_ical:2.1:patch2:*:*:*:*:*:*

Vendor	Product	Version	CPE
netscape	iplanet_ical	2.1	cpe:2.3:a:netscape:iplanet_ical:2.1:patch2::::::

References

www.atstake.com/research/advisories/2000/a100900-1.txt

www.osvdb.org/7210

www.securityfocus.com/bid/1769

exchange.xforce.ibmcloud.com/vulnerabilities/5757

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2000-1073