CVE-2000-1074: csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries,...

Security readout for executives and security teams

This is a legacy local privilege escalation in iCal 2.1 Patch 2. A low-privileged icsuser account could potentially become root if csstart loads attacker-controlled replacement libraries from unsafe relative paths. Exposure appears limited to legacy systems running iCal 2.1 Patch 2 with the icsuser account and csstart component present. The source bundle does not identify broader affected products or versions. Prioritize if legacy iCal infrastructure remains in production. Business risk is root compromise from a local account, but relevance depends entirely on whether this obsolete software still exists. Mitigation focus: Check original vendor guidance before assuming a fixed version.; Inventory and retire any remaining iCal 2.1 Patch 2 deployments.; Restrict or disable unnecessary icsuser access on affected hosts..

Prepared

Jul 11, 2026, 23:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.