CVE-1999-1013: IBM Aix

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.

Affected products

• IBM Aix: version 4.1.5 only; version 4.2.1 only

Published 1999-09-23. Last modified 2026-06-16.