Title

The system must prevent the use of dictionary words for passwords. (Cat II impact)

Discussion

An easily guessable password provides an open door to any external or internal malicious intruder. Many computer compromises occur as the result of account name and password guessing. This is generally done by someone with an automated script using repeated logon attempts until the correct account and password pair is guessed. Utilities, such as cracklib, can be used to validate passwords are not dictionary words and meet other criteria during password changes.

Check Content

Determine if the system prevents the use of dictionary words in passwords. If it does not, this is a finding.

Fix Text

Configure the system to prevent the use of dictionary words in passwords.

Additional Identifiers

Rule ID: SV-25954r1_rule

Vulnerability ID: V-22307

Group Title: GEN000790

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.