Check: GEN007860
VMware ESX 3 Server:
GEN007860
(in version v1 r2)
Title
The system must ignore IPv6 ICMP redirect messages. (Cat II impact)
Discussion
ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.
Check Content
Determine if the system is configured to ignore IPv6 ICMP redirect messages. If it is not, this is a finding.
Fix Text
Configure the system to ignore IPv6 ICMP redirect messages.
Additional Identifiers
Rule ID: SV-26225r1_rule
Vulnerability ID: V-22550
Group Title: GEN007860
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-4 |
Information Flow Enforcement |