iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iplanet_ical | Netscape | 2.1-patch2 (including) | 2.1-patch2 (including) |