Check: GEN008640
VMware ESX 3 Server:
GEN008640
(in version v1 r2)
Title
The system must not use removable media as the boot loader. (Cat I impact)
Discussion
Malicious users with removable boot media can gain access to a system configured to use removable media as the boot loader.
Check Content
Ask the SA if the system uses removable media for the boot loader. If it does, this is a finding.
Fix Text
Configure the system to use a bootloader installed on fixed media.
Additional Identifiers
Rule ID: SV-4247r2_rule
Vulnerability ID: V-4247
Group Title: GEN008640
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
Implement the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |