CVE-2000-1072: Netscape Iplanet Ical

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.

Affected products

Published 2000-12-11. Last modified 2026-06-16.