[SA19001] iCal "Calendar Text" Script Insertion Vulnerability

TITLE: iCal "Calendar Text" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19001 VERIFY ADVISORY: http://secunia.com/advisories/19001/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: iCal 3.x http://secunia.com/product/931/ DESCRIPTION: KeyShore and...

CVE-2003-1263

CVE-2003-1263 affects the ICAL.EXE component in iCal 3.7. A malformed HTTP request (possibly due to an invalid method name) can cause a remote DoS crash. Public details consistently describe a crash condition without providing exploit code, vectors, or patched versions. The available records do n...

CVE-2003-1263

ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service crash via a malformed HTTP request, possibly due to an invalid method name...

CVE-2004-1021

iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms...

CVE-2004-1021

CVE-2004-1021 affects iCal prior to 1.5.4 on Mac OS X 10.2.3 and later. The underlying issue is that iCal does not alert the user for alarms in calendars, enabling an attacker to cause the execution of programs and sending of email via alarms. The description and public references in the provided...

CVE-2004-1021

iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms...

iCal < 1.5.4

The remote host is running a version of iCal which is older than version 1.5.4. Such versions have an arbitrary command execution vulnerability. A remote attacker could exploit this by tricking a user into opening or importing a new iCal calendar. TRUSTED...

CVE-2003-1263

ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service crash via a malformed HTTP request, possibly due to an invalid method name...

Multiple iCal bugs

DoS, physical path disclosure...

ical 3.7 remote dos

hi iCal http://www.brownbearsw.comis a web-based calendar that can be used to show meetings, events, or other schedules. calendars can be viewed, edited, and administered totally through the web. iCal is build for thin-clients, so access calendar without any plug-ins or java interpreters. I found...

iCal 3.7 - HTTP Request Denial of Service

iCal 3.7 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6505/info A denial of service vulnerability has been reported for iCal. The vulnerability occurs when iCal receives a specially formatted HTTP request. This will cause iCal to crash thereby leading to a denial of...

iCal 3.7 - Remote Buffer Overflow (PoC)

iCal 3.7 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/6506/info A buffer overflow vulnerability has been reported for iCal. The vulnerability occurs when the iCal web server receives an overly long HTTP request. This will cause iCal to crash and result in a denial of...

iCal 3.7 - HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/6505/info A denial of service vulnerability has been reported for iCal. The vulnerability occurs when iCal receives a specially formatted HTTP request. This will cause iCal to crash thereby leading to a denial of service. Restarting the service is necessa...

iCal 3.7 - Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/6506/info A buffer overflow vulnerability has been reported for iCal. The vulnerability occurs when the iCal web server receives an overly long HTTP request. This will cause iCal to crash and result in a denial of service condition. Restarting the service...

CVE-2000-1071

Technical details (affected product, root cause, impact, and fix) are not publicly available in the provided documents. Monitor official CVE records and vendor advisories for updates.

CVE-2000-1072

CVE-2000-1072 affects iCal 2.1 Patch 2 where multiple files are installed with world-writable permissions. This allows a local user to modify the iCal configuration and, by replacing the iplncal.sh program with a Trojan horse, execute arbitrary commands. The underlying issue is improper permissio...

CVE-2000-1074

CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...

CVE-2000-1073

CVE-2000-1073 affects the iCal 2.1 Patch 2 environment through the csstart program. The root cause is that csstart searches for the cshttpd executable in the current working directory; a local user can place a Trojan Horse cshttpd in a directory and run csstart from there, enabling local privileg...

CVE-2000-1073

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory...