CVE-2000-0494

Veritas Volume Manager contains a local-privilege issue where a world-writable .server_pids file can be modified by an unprivileged user to inject commands. Those commands are then executed by the vmsa_server script, enabling potentially arbitrary code execution with local access. The CVE descrip...

CVE-2000-0494: Undefined Security Weakness

Veritas Volume Manager creates a world writable .serverpids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsaserver script...