Volume Manager Security Vulnerabilities - February

CVE-2000-0494

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.