Generating OH/Invoice/Internal Certs
Discovered By:
Unknown
Date:
1995-96
Patched:
Early 1996
Using any internal account it was possible to generate OH/Invoice/Internal
certs as long as you had a valid promo code for those account types.
There was also a separate tool which allowed a cert to be rearmed. This
resulted in hundreds of unauthorized OH accounts and many invoice and
internal accounts being created.
AOL patched this sometime in 1996 and now you need CRIS access, be behind
the firewall and a special account flag to be able to generate certs of
those type.
Contributed By:
O0O
|
