Check: WINER-000002
Windows 2003 DC STIG:
WINER-000002
(in version v6 r40)
Title
The system must be configured to collect error information. (Cat II impact)
Discussion
Windows Error Reporting information can be used to help diagnose day-to-day software issues, as well as help discover malicious code and possibly zero-day attacks on systems.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> System -> Internet Communication Management -> Internet Communication settings -> "Turn off Windows Error Reporting" to "Disabled".
Additional Identifiers
Rule ID: SV-29284r2_rule
Vulnerability ID: V-3471
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001312 |
Generate error messages that provide information necessary for corrective actions without revealing information that could be exploited. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| SI-11 |
Error Handling |