VMware ESX 3 Server

The VMware ESX 3 Server (V1 R2) has 630 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

630STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

A system vulnerability tool must be run on the system monthly.

VMware ESX 3 Server

Assessment Title

Rule Text

A system vulnerability tool must be run on the system monthly.

Description

Discussion Text

A system vulnerability tool compares file and directory integrity to the baseline. It can alert the system administrator to unauthorized changes in files or directories. Unauthorized changes in files and directories can give a user unauthorized access to system resources.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-939

Rule

SV-939r2_rule

Severity

medium

Rule Version

GEN006540

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Perform the following to check for a security tool executing monthly:

   #   crontab –l 

Check for the existence of a vulnerability assessment tool being scheduled and run monthly.  If no entries exist in the crontab, ask the SA if a vulnerability tool is run monthly.  In addition, if the tool is run monthly, ask to see any reports that may have been generated from the tool.  If a tool is not run monthly then this a finding.

Implementation Procedure

Fix Text

Add a monthly cronjob to run the system vulnerability tool.

STIG check 611 of 630 in the VMware ESX 3 Server STIG checklist

← Previous · V-936The nosuid option must be enabled on all NFS client mounts.Next · V-941 →The system's access control program must log each system access attempt.