Detections
Analytics

1.117 SOL-11.1-050020

Information

The system must not respond to ICMP timestamp requests.

GROUP ID: V-216132RULE ID: SV-216132r959010

By accurately determining the system's clock state, an attacker can more effectively attack certain time-based pseudorandom number generators (PRNGs) and the authentication systems that rely on them.

Solution

The Network Management profile is required.

Disable source respond to timestamp.

pfexec ipadm set-prop -p _respond_to_timestamp=0 ip

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216132r959010_rule, STIG-ID|SOL-11.1-050020, Vuln-ID|V-216132

Plugin: Unix

Control ID: 4b1098d430f0d7b7bc2606fd0cde621f6b3960b4bbf687f492be4790d2713062