Description
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
References
- 19990923 named-xfer hole on AIX (fwd) mailing-list
- 673 vdb-entry