CVE Vulnerabilities

CVE-2000-0494

Published: Jun 16, 2000 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.

Affected Software

Name Vendor Start Version End Version
Volume_manager Symantec_veritas 3.0.2 (including) 3.0.2 (including)
Volume_manager Symantec_veritas 3.0.3 (including) 3.0.3 (including)
Volume_manager Symantec_veritas 3.0.4 (including) 3.0.4 (including)

References