It has been confirmed that djbdns versions 1.05 and below lets AXFRed subdomains overwrite domains. Patch included.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75421/djbdns-overwrite.txt
Source: https://packetstormsecurity.com/files/75421/djbdns-1.05-AXFRed-Subdomain-Overwrite.html