WA00555 W22 - The web server must be configured to listen on a specific IP address and port. - 'Listen directive exists'

Information

The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests. Rather than be unrestricted to listen on all IP addresses available to the system, the specific IP address or addresses intended must be explicitly specified. Specifically a Listen directive with no IP address specified, or with an IP address of zero's should not be used. Having multiple interfaces on web servers is fairly common, and without explicit Listen directives, the web server is likely to be listening on an inappropriate IP address / interface that was not intended for the web server. Single homed system with a single IP addressed are also required to have an explicit IP address in the Listen directive, in case additional interfaces are added to the system at a later date.

Solution

Configure the Listen directive to listen on a specific IP address and port.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_WIN_V1R13_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CAT|II, Rule-ID|SV-33184r1_rule, STIG-ID|WA00555_W22, Vuln-ID|V-26326

Plugin: Windows

Control ID: cb14d3b13a7e6d223519696576631580cdeefd55537bd53fcf7d4fc4070a3de5