Check: GEN003609
VMware ESX 3 Server:
GEN003609
(in version v1 r2)
Title
The system must ignore IPv4 ICMP redirect messages. (Cat II impact)
Discussion
ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
Check Content
Determine if the system is configured to ignore IPv4 ICMP redirect messages. If not, this is a finding.
Fix Text
Configure the system to ignore IPv4 ICMP redirect messages.
Additional Identifiers
Rule ID: SV-26080r1_rule
Vulnerability ID: V-22416
Group Title: GEN003609
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001503 |
The organization controls changes to the configuration settings in accordance with organizational policies and procedures. |
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |