UCF STIG Viewer Logo

The network device must prevent the execution of prohibited mobile code.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-NET-000289-NDM-NA SRG-NET-000289-NDM-NA SRG-NET-000289-NDM-NA_rule Medium
Description
The mobile code paradigm encompasses programs that can be executed on one or several hosts other than the one they originate from. Mobility of such programs implies some built-in capability for each piece of code to travel smoothly from one host to another. Mobile code systems range from simple applets to intelligent software agents. These systems offer several advantages over the more traditional distributed computing approach. Decisions regarding the employment of mobile code within the network device are based on the potential for the code to cause damage to the system if used maliciously. Mobile code technologies include Java, JavaScript, ActiveX, PDF, Postscript, Shockwave movies, Flash animations, and VBScript. The network device must be configured to detect mobile code and prevent the affected traffic from reaching its intended destination and being executed. This requirement requires enforcement action that is not the purview of network device management.
STIG Date
Network Device Management Security Requirements Guide 2013-07-30

Details

Check Text ( C-SRG-NET-000289-NDM-NA_chk )
This requirement is NA for network device management.
Fix Text (F-SRG-NET-000289-NDM-NA_fix)
This requirement is NA for network device management.