CVE-2000-1073: Netscape Iplanet Ical

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.

Affected products

• Netscape Iplanet Ical: version 2.1 only

Published 2000-12-11. Last modified 2026-06-16.