## Description

named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### ibm - aix

Affected Versions:

- 4.1.5

### ibm - aix

Affected Versions:

- 4.2.1

## References

- http://marc.info/?l=bugtraq&m=93837026726954&w=2
- http://www.securityfocus.com/bid/673
  Exploit Patch Vendor Advisory
- http://marc.info/?l=bugtraq&m=93837026726954&w=2
- http://www.securityfocus.com/bid/673
  Exploit Patch Vendor Advisory

Neural Processor Active