Re: AIM Backdoor?

[Chris Brenton <cbrenton () altenet com>]

miked () rootdown net wrote:
> Anyone care to verify my findings or find a CSS vulnerability on
> free.aol.com?

Confirmed on IE version 6. Tried this on a test machine and
http://free.aol.com gets added to the list of "trusted" sites without
any mention of the modification during the install.

HTH,
C
-- 
**************************************
cbrenton () altenet com

find / -name \*yourbase\* -exec chown us:us {} \;

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com