VMware ESXi Server 5.0 Security Technical Implementation Guide

The VMware ESXi Server 5.0 Security Technical Implementation Guide (V1 R10) has 133 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

133STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R10

CurrentPublished Fri Jan 27 2017

The SSH daemon must limit connections to a single session.

VMware ESXi Server 5.0 Security Technical Implementation Guide

Assessment Title

Rule Text

The SSH daemon must limit connections to a single session.

Description

Discussion Text

The SSH protocol has the ability to provide multiple sessions over a single connection without reauthentication. A compromised client could use this feature to establish additional sessions to a system without consent or knowledge of the user.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-39253

Rule

SV-51069r2_rule

Severity

medium

Rule Version

SRG-OS-000027-ESXI5

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Disable lock down mode. Enable the ESXi Shell. Execute the following command(s):
# grep MaxSessions /etc/ssh/sshd_config

If the command returns nothing, or if "MaxSessions" is not set to "1", this is a finding.

Re-enable lock down mode.

Implementation Procedure

Fix Text

Disable lock down mode. Enable the ESXi Shell. Execute the following command(s):
# vi /etc/ssh/sshd_config

Add/modify the attribute line entry to the following (quotes for emphasis only):
"MaxSessions 1" 

Re-enable lock down mode.

STIG check 8 of 133 in the VMware ESXi Server 5.0 STIG checklist

← Previous · V-39252There must be no .rhosts or hosts.equiv files on the system.Next · V-39254 →The system must use time sources local to the enclave.