Detections
Analytics

1.119 SOL-11.1-050020

Information

The system must not respond to ICMP timestamp requests.

GROUP ID: V-216369
RULE ID: SV-216369r959010

By accurately determining the system's clock state, an attacker can more effectively attack certain time-based pseudorandom number generators (PRNGs) and the authentication systems that rely on them.

Solution

The Network Management profile is required.

Disable source respond to timestamp.

# pfexec ipadm set-prop -p _respond_to_timestamp=0 ip

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216369r959010_rule, STIG-ID|SOL-11.1-050020, Vuln-ID|V-216369

Plugin: Unix

Control ID: eeee0f3c93fe39a6d16c00fa8c7335907ff6aa7afba9e6238e64c6ce97474bb9