Vulnerability Database

299,702

Total vulnerabilities in the database

CVE-2000-1074

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.

  • Published: Dec 11, 2000
  • Updated: Nov 9, 2025
  • CVE: CVE-2000-1074
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
netscape / iplanet_ical 2.1-patch2 2.1-patch2.x