PT-2006-1991 · Aol · Aol 9.0 Security Edition

Carsten Eiram · Publicado 2006-08-21 · Atualizado 2018-10-18 · CVE-2006-0948

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AOL 9.0 Security Edition version 4184.2340 AOL 9.0 Security Edition (other versions, not specified)

Description The issue concerns insecure permissions set for the "America Online 9.0" directory, allowing local users to escalate privileges by replacing critical files.

Recommendations For AOL 9.0 Security Edition version 4184.2340, consider changing the permissions of the "America Online 9.0" directory to restrict access and prevent local users from replacing critical files. For other affected versions of AOL 9.0 Security Edition, apply the same permission changes to the "America Online 9.0" directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0948

Produtos afetados

Aol 9.0 Security Edition

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28445 · Nota
• http://securityreason.com/securityalert/1416 · Nota
• http://secunia.com/secunia_research/2006-08 · Nota
• http://secunia.com/advisories/18734 · Aviso do Fabricante
• http://securityfocus.com/bid/19583 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-0948 · Nota de Segurança
• http://osvdb.org/27995 · Nota
• http://vupen.com/english/advisories/2006/3317 · Nota
• http://securitytracker.com/id?1016717 · Correção
• http://securityfocus.com/archive/1/443622/100/0/threaded · Nota