Detections
Analytics

DO6747-ORACLE11 - Remote administration should be disabled for the Oracle connection manager - '%ORACLE_HOME%\NETWORK\ADMIN\CMAN.ORA does not exist'

Information

Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or interrupt its service.

Solution

View the cman.ora file in the ORACLE_HOME/network/admin directory of the Connection Manager.

Include the following line in the file:

 REMOTE_ADMIN = NO

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, Rule-ID|SV-24955r1_rule, STIG-ID|DO6747-ORACLE11, Vuln-ID|V-16032

Plugin: Windows

Control ID: c4a568aa64ffe4e365fb443c70d41b227492844d167253ca14ecece5fe2a1bcf