CVE-2000-0494: Symantec Veritas Volume Manager

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.

Affected products

• Symantec Veritas Volume Manager: version 3.0.2 only; version 3.0.3 only; version 3.0.4 only

Published 2000-06-16. Last modified 2026-06-16.