The network element must prevent the execution of prohibited mobile code.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-34255 | SRG-NET-000289-DNS-NA | SV-44734r1_rule | Medium |
| Description |
|---|
| Decisions regarding the employment of mobile code within network elements are based on the potential for the code to cause damage to the system if used maliciously. Mobile code technologies include, for example, Java, JavaScript, ActiveX, PDF, Postscript, Shockwave movies, Flash animations, and VBScript. Prevention of mobile code execution is not a function of DNS. |
| STIG | Date |
|---|---|
| Domain Name System (DNS) Security Requirements Guide | 2012-10-24 |
Details
| Check Text ( C-42239r1_chk ) |
|---|
| This is not a function of DNS. |
| Fix Text (F-38186r1_fix) |
|---|
| This requirement is NA for DNS. No fix required. |