UCF STIG Viewer Logo

If smartphone email auto signatures are used, the signature message must not disclose the email originated from a smartphone (e.g., “Sent From My Wireless Handheld”).


Overview

Finding ID Version Rule ID IA Controls Severity
V-24984 WIR-MOS-AND-004 SV-35014r1_rule ECSC-1 Low
Description
The disclaimer message may give information which may key an attacker in on the device.
STIG Date
Android 2.2 (Dell) Security Technical Implementation Guide 2014-08-26

Details

Check Text ( C-34890r1_chk )
Verify the auto-signature, if used, meets requirements.

-Check a random sample of 3-4 devices.
-On the handheld, launch the Good client and go to Preferences > Signature.

Mark as a finding if the device has been configured with an auto-signature and signature states the email originated from a smartphone.
Fix Text (F-27625r4_fix)
Configure the iOS email auto-signature message, so it does not disclose the email originated from the iOS device (e.g., Sent From My Wireless Handheld).