Description
Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG key) command line argument to dig.
References
- 20071030 IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability third-party-advisory
- 26262 vdb-entry
- 27437 third-party-advisory
- IZ05017 vendor-advisory
- aix-dig-dnsnamefromtext-integer-underflow(38169) vdb-entry
- 1018871 vdb-entry
- ADV-2007-3669 vdb-entry