high7.2Public exploit code
CVE-2000-0494
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Veritas Software Volume Manager 3.0.2/3.0.3/3.0.4 - File Permission2000-06-16 · local · solaris · Verified
Impact
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec Veritas | Volume Manager | Versions 3.0.2, 3.0.3, 3.0.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html
- http://seer.support.veritas.com/tnotes/volumeman/230053.htm
- http://www.securityfocus.com/bid/1356
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html
- http://seer.support.veritas.com/tnotes/volumeman/230053.htm
- http://www.securityfocus.com/bid/1356