CVE-2000-1073

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.atstake.com/research/advisories/2000/a100900-1.txtExploit, Patch, Vendor Advisory
http://www.osvdb.org/7210
http://www.securityfocus.com/bid/1769Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5757
http://www.atstake.com/research/advisories/2000/a100900-1.txtExploit, Patch, Vendor Advisory
http://www.osvdb.org/7210
http://www.securityfocus.com/bid/1769Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5757

Timeline

Published: Dec 11, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-107410.0csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser acc CVE-2000-10755.0Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arb CVE-2000-107610.0Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could CVE-2000-107710.0Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a lon CVE-2000-10785.0ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.CVE-2000-10797.5Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers t CVE-2000-10805.0Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.CVE-2000-10814.6The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buf CVE-2000-10824.6The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer CVE-2000-10832.1The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer befo CVE-2000-10844.6The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer CVE-2000-10854.6The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffe