Detections
Analytics
GEN003580 - The system must use initial TCP sequence numbers most resistant to sequence number guessing attacks.
Information
One use of initial TCP sequence numbers is to verify bidirectional communication between two hosts, which provides some protection against spoofed source addresses being used by the connection originator. If the initial TCP sequence numbers for a host can be determined by an attacker, it may be possible to establish a TCP connection from a spoofed source address without bidirectional communication.Solution
Edit /etc/default/inetinit and set the TCP_STRONG_ISS parameter to 2.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226887r603265_rule, STIG-ID|GEN003580, STIG-Legacy|SV-27416, STIG-Legacy|V-12001, Vuln-ID|V-226887
Plugin: Unix
Control ID: 905ab470da48375bf943f53dc496974e4a6f1cf63ed99bf9203773ac2651a53b