Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/1356 | Exploit Patch Vendor Advisory |
http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html | Exploit Patch Vendor Advisory |
http://seer.support.veritas.com/tnotes/volumeman/230053.htm |
Configurations
Configuration 1 (hide)
|
Information
Published : 2000-06-15 21:00
Updated : 2008-09-10 12:04
NVD link : CVE-2000-0494
Mitre link : CVE-2000-0494
JSON object : View
CWE
Products Affected
symantec_veritas
- volume_manager