NetSight
high7.2Public exploit code

CVE-2000-0494

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.

Affected products

VendorProductAffected versions
Symantec VeritasVolume Manager
Versions 3.0.2, 3.0.3, 3.0.4

References