PT-2006-1991 · Aol · Aol 9.0 Security Edition

Carsten Eiram · Published 2006-08-21 · Updated 2018-10-18 · CVE-2006-0948

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AOL 9.0 Security Edition version 4184.2340 AOL 9.0 Security Edition (other versions, not specified)

Description The issue concerns insecure permissions set for the "America Online 9.0" directory, allowing local users to escalate privileges by replacing critical files.

Recommendations For AOL 9.0 Security Edition version 4184.2340, consider changing the permissions of the "America Online 9.0" directory to restrict access and prevent local users from replacing critical files. For other affected versions of AOL 9.0 Security Edition, apply the same permission changes to the "America Online 9.0" directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0948

Affected Products

Aol 9.0 Security Edition

References · 10

• http://secunia.com/advisories/18734 · Vendor Advisory
• http://securityfocus.com/bid/19583 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0948 · Security Note
• http://securitytracker.com/id?1016717 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28445 · Note
• http://securityreason.com/securityalert/1416 · Note
• http://secunia.com/secunia_research/2006-08 · Note
• http://osvdb.org/27995 · Note
• http://vupen.com/english/advisories/2006/3317 · Note
• http://securityfocus.com/archive/1/443622/100/0/threaded · Note