PT-1999-1530 · Isc+1 · Named-Xfer+1

Published 1999-09-23 · Updated 2016-10-18 · CVE-1999-1013

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AIX versions 4.1.5 through 4.2.1

Description The issue allows members of the system group to gain root access by overwriting system files. This is achieved via the -f parameter and a malformed zone file in the named-xfer component.

Recommendations For AIX versions 4.1.5 through 4.2.1, consider restricting access to the named-xfer component to prevent potential exploitation. As a temporary workaround, avoid using the -f parameter with malformed zone files until a fix is available.

Exploit

Fix

Related Identifiers

CVE-1999-1013

Affected Products

Aix

Named-Xfer

References · 3

• 🔥 http://securityfocus.com/bid/673 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1013 · Security Note
• http://marc.info/?l=bugtraq&m=93837026726954&w=2 · Note