Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
WINS lookups is not prohibited on a Windows 2000 DNS server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4505 | DNS0825 | SV-4505r1_rule | ECSC-1 | High |
| Description |
|---|
| Integration of WINS and Windows 2000 DNS leaves Windows 2000 DNS open to all the vulnerabilities of WINS, including the ability to update records without authentication. |
| STIG | Date |
|---|---|
| Windows DNS | 2015-01-05 |
Details
| Check Text ( C-3566r1_chk ) |
|---|
| The reviewer will validate the "Use WINS forward lookup" is not checked on the “WINS” tab on the properties dialog of each zone. If WINS is integrated on a Windows 2000 DNS server, then this is a finding. |
| Fix Text (F-4390r1_fix) |
|---|
| The SA should disable any integration between DNS and WINS as soon as it feasible to do so. If WINS is required for legacy applications, then DNS clients will need to be reconfigured to use WINS rather than DNS for NetBIOS name resolution. The SA should uncheck Use WINS forward lookup on the WINS tab on the properties dialog of each zone. |