Check: GEN003604
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE:
GEN003604
(in versions v1 r14 through v1 r10)
Title
The system must not respond to ICMP timestamp requests sent to a broadcast address. (Cat II impact)
Discussion
The processing of Internet Control Message Protocol (ICMP) timestamp requests increases the attack surface of the system. Responding to broadcast ICMP timestamp requests facilitates network mapping and provides a vector for amplification attacks.
Check Content
# /usr/sbin/no -o bcastping If the value returned is not 0, this is a finding.
Fix Text
Configure the system to ignore ICMP Timestamp requests sent to broadcast addresses. #no -po bcastping=0
Additional Identifiers
Rule ID: SV-38798r1_rule
Vulnerability ID: V-22411
Group Title: GEN003604
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-4 |
Information Flow Enforcement |