Description
AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.
References
- http://secunia.com/secunia_research/2006-08
- ADV-2006-3317 vdb-entry
- aol-default-insecure-permissions(28445) vdb-entry
- 18734 third-party-advisory
- 20060818 Secunia Research: AOL Insecure Default Directory Permissions mailing-list
- 1416 third-party-advisory
- 27995 vdb-entry
- 19583 vdb-entry
- 1016717 vdb-entry