Description
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
References
- ical-xhost-gain-privileges(5752) vdb-entry
- A100900-1 vendor-advisory
- 1767 vdb-entry
- 7213 vdb-entry