Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0494. PoCs published by Dixie Flatline.
AI-analyzed exploit summary This exploit leverages a race condition in Veritas Volume Manager (pre-Solaris 8) where the .server_pids file is created with world-writable permissions (666). An attacker can inject arbitrary commands into this file, which are executed as root when an administrator stops the server.
Description
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
Exploits (1)
This exploit leverages a race condition in Veritas Volume Manager (pre-Solaris 8) where the .server_pids file is created with world-writable permissions (666). An attacker can inject arbitrary commands into this file, which are executed as root when an administrator stops the server.