Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must not respond to ICMP broadcast netmask requests.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216371 | SOL-11.1-050040 | SV-216371r959010_rule | Low |
| Description |
|---|
| By determining the netmasks of various computers in your network, an attacker can better map your subnet structure and infer trust relationships. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2024-05-30 |
Details
| Check Text ( C-17607r371201_chk ) |
|---|
| Determine if the response to address mask broadcast is disabled. # ipadm show-prop -p _respond_to_address_mask_broadcast -co current ip If the output of this command is not "0", this is a finding. |
| Fix Text (F-17605r371202_fix) |
|---|
| The Network Management profile is required. Disable responses to address mask broadcast. # pfexec ipadm set-prop -p _respond_to_address_mask_broadcast=0 ip |