Re: AIM Backdoor?

miked_at_rootdown.net wrote:
>
> Anyone care to verify my findings or find a CSS vulnerability on
> free.aol.com?

Confirmed on IE version 6. Tried this on a test machine and
http://free.aol.com gets added to the list of "trusted" sites without
any mention of the modification during the install.

HTH,
C

-- 
**************************************
cbrenton_at_altenet.com
find / -name \*yourbase\* -exec chown us:us {} \;
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com