CVE:CVE-2000-1072
CNNVD:CNNVD-200012-047
iCal 2.1版本的Patch 2安装许多有全域可写许可的文件。本地用户通过用特洛伊木马病毒替换iplncal.sh程序修改iCal配置和执行任意命令。
solution:Upgrade netscape iplanet_ical to a higher version than 2.1:patch2,and avoid the version 2.1:patch2