The vulnerability of the read_config_file function (lib/hesiod.c) in the daemon for accessing DNS Hesiod databases allows a attacker to gain root privileges.

The vulnerability of the readconfigfile function lib/hesiod.c in the daemon for accessing DNS databases, Hesiod, is related to the tendency to revert to the default domain “.athena.mit.edu” in case of an error during the opening of the configuration file. Exploiting this vulnerability could allow...