The SNMP service must use only SNMPv3 or its successors.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22447 | GEN005305 | SV-26714r1_rule | DCPP-1 | Medium |
| Description |
|---|
| SNMP Versions 1 and 2 are not considered secure. Without the strong authentication and privacy provided by the SNMP Version 3 User-based Security Model (USM), an attacker or other unauthorized users may gain access to detailed system management information and use the information to launch attacks against the system. |
| STIG | Date |
|---|---|
| SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2015-10-01 |
Details
| Check Text ( C-27721r1_chk ) |
|---|
| Verify the SNMP daemon is not configured to use community strings. # grep community /etc/snmp/conf | grep -v '^#' If any configuration is found, this is a finding. |
| Fix Text (F-23955r1_fix) |
|---|
| Edit /etc/snmp/conf to remove references to community strings. Restart the SNMP service. |