UCF STIG Viewer Logo

If BlackBerry email auto signatures are used, the signature message must not disclose that the email originated from a BlackBerry or mobile device (e.g., “Sent From My Wireless Handheld”).


Overview

Finding ID Version Rule ID IA Controls Severity
V-11872 WIR1060-01 SV-12372r1_rule ECSC-1 Low
Description
The disclaimer message may give information which may key an attacker in on the device. This is primarily an OPSEC issue. This setting was directed by the JTF GNO.
STIG Date
BlackBerry OS (version 5-7) Security Technical Implementation Guide 2014-06-11

Details

Check Text ( C-14988r1_chk )
Check a sample of BlackBerry devices (use 2-3 devices as a random sample):

- Open the BlackBerry email folder.
- Highlight the date line at the top of the list of messages.
- Click the Menu button.
- Select Options, then Email Settings.
- Check the contents of “Auto Signature” text box to verify compliance.
Fix Text (F-23348r1_fix)
If BlackBerry email auto signatures are used, the signature message does not disclose that the email originated from a BlackBerry or mobile device (e.g., “Sent From My Wireless Handheld”).