CVE-2006-0948 | Vulnerability Database | Aqua Security

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the America Online 9.0 directory, which allows local users to gain privileges by replacing critical files.

Affected Software

Name	Vendor	Start Version	End Version
Aol	Aol	9.0_4184.2340 (including)	9.0_4184.2340 (including)

References

http://secunia.com/advisories/18734
http://secunia.com/secunia_research/2006-08
http://securityreason.com/securityalert/1416
http://securitytracker.com/id?1016717
http://www.osvdb.org/27995
http://www.securityfocus.com/archive/1/443622/100/0/threaded
http://www.securityfocus.com/bid/19583
http://www.vupen.com/english/advisories/2006/3317
https://exchange.xforce.ibmcloud.com/vulnerabilities/28445
http://secunia.com/advisories/18734
http://secunia.com/secunia_research/2006-08
http://securityreason.com/securityalert/1416
http://securitytracker.com/id?1016717
http://www.osvdb.org/27995
http://www.securityfocus.com/archive/1/443622/100/0/threaded
http://www.securityfocus.com/bid/19583
http://www.vupen.com/english/advisories/2006/3317
https://exchange.xforce.ibmcloud.com/vulnerabilities/28445

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0948
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html