CVE-2000-0494 Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
HighCVSS 7.2
EPSS 0.94%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec veritas volume manager | = 3.0.2 | No fix listed |
| symantec veritas volume manager | = 3.0.3 | No fix listed |
| symantec veritas volume manager | = 3.0.4 | No fix listed |
References
- 20000616 Veritas Volume Manager 3.0.x hole exploit mailing-list patch vendor-advisory
- seer.support.veritas.com
- 1356 exploit patch vdb-entry vendor-advisory