CVE-2000-0030: Medium severity Sun SunOS vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove dmispd (dmi_cmd) from your environment.

   Uninstall or remove the dmispd component (or dmi_cmd) if it is not required on the system to eliminate the ability for local users to add files to /var/dmi/db.

2. Configuration

   Change ownership and filesystem permissions on /var/dmi/db so that unprivileged local users cannot create or modify files. Ensure only root or explicitly authorized system accounts have write access.

   Solaris dmispd (/var/dmi/db) directory write permissions = restrict write access to root/authorized system accounts
3. Configuration

   Stop and disable the dmispd service or otherwise prevent execution of the dmi_cmd interface when it is not required by the system.

   dmispd (dmi_cmd) service enabled = disabled (if not required)
4. Compensating control

   Enable and enforce per-user or per-project filesystem quotas on the filesystem containing /var/dmi/db (for example using ZFS or UFS quota features) to prevent a single local user from filling restricted disk space.

5. Operational

   Identify and remove unauthorized or extraneous files from /var/dmi/db, audit which local accounts created them, and monitor the directory for new unauthorized files. Review local user activity and take appropriate account remediation.

Event History

Frequently Asked Questions