VULNERABILITY INTELLIGENCE
CVE-2007-4622
CVSS score7.2 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2007-11-05
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG key) command line argument to dig.