Detections
Analytics
SOL-11.1-050090 - The system must disable ICMP redirect messages.
Information
A malicious user can exploit the ability of the system to send ICMP redirects by continually sending packets to the system, forcing the system to respond with ICMP redirect messages, resulting in an adverse impact on the CPU performance of the system.Solution
The Network Management profile is required.If the version of Solaris is earlier than Solaris 11.2, disable send redirects for IPv4 and IPv6.
# pfexec ipadm set-prop -p _send_redirects=0 ipv4
# pfexec ipadm set-prop -p _send_redirects=0 ipv6
If the version of Solaris is Solaris 11.2 or later, disable send redirects for IPv4 and IPv6.
# pfexec ipadm set-prop -p send_redirects=off ipv4
# pfexec ipadm set-prop -p send_redirects=off ipv6
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip
Item Details
Audit Name: DISA Solaris 11 X86 STIG v3r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216139r959010_rule, STIG-ID|SOL-11.1-050090, STIG-Legacy|SV-61069, STIG-Legacy|V-48197, Vuln-ID|V-216139
Plugin: Unix
Control ID: 374444c7c47f5b32a2274c46c17b08c40c28e9470f9a3ff74f07030bbbb68e85