Check: GEN003602
VMware ESX 3 Server:
GEN003602
(in version v1 r2)
Title
The system must not process ICMP timestamp requests. (Cat III impact)
Discussion
The processing of Internet Control Message Protocol (ICMP) timestamp requests increases the attack surface of the system.
Check Content
Determine if the system is configured to respond to ICMP Timestamp requests. If so, this is a finding.
Fix Text
Configure the system to ignore ICMP Timestamp requests.
Additional Identifiers
Rule ID: SV-26071r1_rule
Vulnerability ID: V-22409
Group Title: GEN003602
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-4 |
Information Flow Enforcement |