Lucene search

[email protected]CVE-2000-1073

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-1073

2001-01-2205:00:00

[email protected]

web.nvd.nist.gov

cve-2000-1073

ical 2.1 patch 2

root privileges

trojan horse cshttpd.

7 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.

Affected configurations

NVD

Node

netscapeiplanet_icalMatch2.1patch2

CPENameOperatorVersion
netscape:iplanet_icalnetscape iplanet icaleq2.1

CPE	Name	Operator	Version
netscape:iplanet_ical	netscape iplanet ical	eq	2.1

References

www.atstake.com/research/advisories/2000/a100900-1.txt

www.osvdb.org/7210

www.securityfocus.com/bid/1769

exchange.xforce.ibmcloud.com/vulnerabilities/5757

7 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2000-1073

nvd1 cvelist1