Privilege Escalation

libhesiod.so is vulnerable to a privilege escalation. The library does not safely check the EUID with the UID parameters, overriding configuration values with environment variable. This can allow a malicious user to use the HESIODCONFIG or HESDOMAIN environment variable to run arbitrary binaries...