Veritas Software Volume Manager 3.0.2/3.0.3/3.0.4 File Permission Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1356/info A vulnerability exists in the Volume Manager product, versions 3.0.x, from Veritas Software. Volume Manager is a popular disk management package. Volume Manager running on Solaris platforms prior to Solaris 8 ar...

CVE-2000-0494

Veritas Volume Manager contains a local-privilege issue where a world-writable .server_pids file can be modified by an unprivileged user to inject commands. Those commands are then executed by the vmsa_server script, enabling potentially arbitrary code execution with local access. The CVE descrip...

CVE-2000-0494: Undefined Security Weakness

Veritas Volume Manager creates a world writable .serverpids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsaserver script...