Navigate

Check: GEN007660

VMware ESX 3 Server: GEN007660 (in version v1 r2)

Title

The Bluetooth protocol handler must be disabled or not installed. (Cat II impact)

Discussion

Bluetooth is a Personal Area Network (PAN) technology. Binding this protocol to the network stack increases the attack surface of the host. Unprivileged local processes may be able to cause the kernel to dynamically load a protocol handler by opening a socket using the protocol.

Check Content

If there is no Bluetooth protocol handler for the system, this is not applicable. Determine if the system prevents the dynamic loading of the Bluetooth protocol handler. If it does not, this is a finding.

Fix Text

Configure the system to prevent the dynamic loading of the Bluetooth protocol handler.

Additional Identifiers

Rule ID: SV-26214r1_rule

Vulnerability ID: V-22539

Group Title: GEN007660

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001551	The organization defines approved authorizations for controlling the flow of information between interconnected systems.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-4	Information Flow Enforcement