CVE-2000-1074 Privilege escalation in n/a

Critical 10.0 Published 22 Jan 2001 Updated 8 Aug 2024

A local attacker with low privileges can gain root access by placing a malicious library in the current directory due to unsafe path usage in iCal.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2000-1074?

CVE-2000-1074 is a critical vulnerability in n/a, published on 22 Jan 2001. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.

Which versions are affected by CVE-2000-1074?

It affects 1 product.

Products include Netscape Iplanet Ical.

How do I fix CVE-2000-1074?

No fix has been published for CVE-2000-1074 yet. Limit exposure of the affected software until one is available.

Is CVE-2000-1074 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-1074 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-r4pg-4fjh-q6c6.