1. Home
  2. Security Hardening
  3. DISA STIG AIX 6.1 V1R14
  4. GEN000000-AIX0220 – The system must provide protection for the TCP stack against connection resets, SYN, and data injection attacks.
Searching...

GEN000000-AIX0220 – The system must provide protection for the TCP stack against connection resets, SYN, and data injection attacks.

Details

The tcp_tcpsecure parameter provides protection for TCP connections from fake SYN’s, fake RST, and data injections on established connections. The first vulnerability involves sending a fake SYN to an established connection to abort the connection. The second vulnerability involves sending a fake RST to an established connection to abort the connection. The third vulnerability involves injecting fake data in an established TCP connection.

Solution

Set the tcp_tcpsecure parameter to 7.

# /usr/sbin/no -p -o tcp_tcpsecure=7

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?
Yes No

Related Articles