EUVD-2000-1060

Malware in sbrugna...

CVE-2000-1073

CVE-2000-1073 affects the iCal 2.1 Patch 2 environment through the csstart program. The root cause is that csstart searches for the cshttpd executable in the current working directory; a local user can place a Trojan Horse cshttpd in a directory and run csstart from there, enabling local privileg...

CVE-2000-1073

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory...

CVE-2000-1074

CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...