Published: 16/06/2000 Updated: 10/09/2008

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.

Vulnerable Product	Search on Vulmon	Subscribe to Product
symantec veritas volume manager 3.0.2
symantec veritas volume manager 3.0.3
symantec veritas volume manager 3.0.4

source: wwwsecurityfocuscom/bid/1356/info A vulnerability exists in the Volume Manager product, versions 30x, from Veritas Software Volume Manager is a popular disk management package Volume Manager running on Solaris platforms prior to Solaris 8 are vulnerable Upon startup, the /etc/rc2d/S96vmsa-server script is executed It neve ...

NVD-CWE-Other http://www.securityfocus.com/bid/1356 http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html http://seer.support.veritas.com/tnotes/volumeman/230053.htm https://nvd.nist.gov https://www.exploit-db.com/exploits/20018/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2000-0494

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect