Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.Referenceshttp://seer.support.veritas.com/tnotes/volumeman/230053.htmhttp://www.securityfocus.com/bid/1356http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html
