Detections
Analytics
BIND-9X-001530 - The platform on which the name server software is hosted must only run processes and services needed to support the BIND 9.x implementation.
Information
Hosts that run the name server software must not provide any other services. Unnecessary services running on the DNS server can introduce additional attack vectors, leading to the compromise of an organization's DNS architecture.NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Disable or uninstall all non-DNS related applications from the BIND 9.x server.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_BIND_9-x_V3R2_STIG.zip
Item Details
Audit Name: DISA BIND 9.x STIG v3r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-272406r1156959_rule, STIG-ID|BIND-9X-001530, Vuln-ID|V-272406
Plugin: Unix
Control ID: 213750cb96b3399529de061a315868d03e56240b39bbb16ad34968ce50856a15