Detections
Analytics
SOL-11.1-050030 - The system must not respond to ICMP broadcast timestamp requests.
Information
By accurately determining the system's clock state, an attacker can more effectively attack certain time-based pseudorandom number generators (PRNGs) and the authentication systems that rely on them.Solution
The Network Management profile is required.Disable respond to timestamp broadcasts.
# pfexec ipadm set-prop -p _respond_to_timestamp_broadcast=0 ip
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R6_STIG.zip
Item Details
Audit Name: DISA Solaris 11 SPARC STIG v3r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216370r959010_rule, STIG-ID|SOL-11.1-050030, STIG-Legacy|SV-61045, STIG-Legacy|V-48173, Vuln-ID|V-216370
Plugin: Unix
Control ID: b5aaa9f2971196d2b97bf379308a0c152fec2e26765498269e827b11adc7cd16