O112-BP-026500 - Remote administration must be disabled for the Oracle connection manager.

Information

Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or interrupt its service.

Solution

View the cman.ora file in the ORACLE_HOME/network/admin directory of the Connection Manager.

Include the following line in the file:

REMOTE_ADMIN = NO

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11-2g_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-219745r961863_rule, STIG-ID|O112-BP-026500, STIG-Legacy|SV-68315, STIG-Legacy|V-54075, Vuln-ID|V-219745

Plugin: Unix

Control ID: 1fd9d5cf872e2d63e70431d3435cf819b0c098c07f9e8cf4f10b9a54684c169c