Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2000-0032: Solaris lets local user crash dmispd daemon
CVE-2000-0032 · published 26 years ago
Summary
On Solaris and SunOS systems, a regular user can place a specially crafted file in the /var/dmi/db directory, causing the dmispd service to stop working. This can lead to interruptions in any processes that rely on that daemon. Apply the latest OS updates or patches that correct the handling of database files to prevent the crash.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sun | solaris |
7.0 cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* |
| sun | sunos |
5.7 cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:* |
Original advisory text
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
10.0
Critical
Timeline
Published22 Dec 1999
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2000-0032 · NVD
Track software like this
Free during beta