Vulnerability in Netscape Iplanet Ical

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.

EPSS: 0.030 (85.9th percentile) — read the EPSS interpretation.

Affected products

Netscape Iplanet_ical — versions 2.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_ATSTAKE, Exploit, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)