CVE-2006-0948

Published: Aug 21, 2006Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.

Affected (1)

Products: Aol: Aol

Aol

1 product

Aol

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aol Aol	Version 9.0_4184.2340

References (18)

http://secunia.com/advisories/18734

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/secunia_research/2006-08

Source: cve@mitre.org

http://securityreason.com/securityalert/1416

Source: cve@mitre.org

http://securitytracker.com/id?1016717

Source: cve@mitre.org

Patch

http://www.osvdb.org/27995

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/443622/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19583

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3317

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28445

Source: cve@mitre.org

http://secunia.com/advisories/18734