Check: GEN003609
Solaris 9 X86 STIG:
GEN003609
(in version v1 r9)
Title
The system must ignore IPv4 ICMP redirect messages. (Cat II impact)
Discussion
ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
Check Content
Verify the system does not accept IPv4 ICMP redirect messages. Procedure: # ndd -get /dev/ip ip_ignore_redirect If the result is not 1, this is a finding.
Fix Text
Configure the system to not accept IPv4 ICMP redirect messages. Procedure: # ndd -set /dev/ip ip_ignore_redirect 1 This command must also be added to a system startup script.
Additional Identifiers
Rule ID: SV-26630r1_rule
Vulnerability ID: V-22416
Group Title:
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001503 |
The organization controls changes to the configuration settings in accordance with organizational policies and procedures. |
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |