Detections
Analytics

SOL-11.1-050020 - The system must not respond to ICMP timestamp requests.

Information

By accurately determining the system's clock state, an attacker can more effectively attack certain time-based pseudorandom number generators (PRNGs) and the authentication systems that rely on them.

Solution

The Network Management profile is required.

Disable source respond to timestamp.

# pfexec ipadm set-prop -p _respond_to_timestamp=0 ip

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216132r959010_rule, STIG-ID|SOL-11.1-050020, STIG-Legacy|SV-61041, STIG-Legacy|V-48169, Vuln-ID|V-216132

Plugin: Unix

Control ID: cd441a62db1c1c16fee6ec0610f11d9ae8c53804f14a2b08a2f64db6f4d10bd6