Check: WINER-000001
Windows 2003 DC STIG:
WINER-000001
(in version v6 r40)
Title
The Error Reporting Service must be running and configured to start automatically. (Cat II impact)
Discussion
Windows Error Reporting information can be used to help diagnose day-to-day software issues, as well as help discover malicious code and possibly zero-day attacks on systems.
Check Content
Fix Text
Configure the Start Type of the Error Reporting Service to "Automatic" and ensure the service has a status of "Started".
Additional Identifiers
Rule ID: SV-70771r1_rule
Vulnerability ID: V-56511
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001312 |
Generate error messages that provide information necessary for corrective actions without revealing information that could be exploited. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| SI-11 |
Error Handling |