libhesiod Read Config File Privilege Escalation

The vulnerability of the readconfigfile function lib/hesiod.c in the daemon for accessing DNS databases, Hesiod, is related to the tendency to revert to the default domain “.athena.mit.edu” in case of an error during the opening of the configuration file. Exploiting this vulnerability could allow...