GEN008710 - The system boot loader must protect passwords using an MD5 or stronger cryptographic hash.

Information

If system boot loader passwords are compromised, users with console access to the system may be able to alter the system boot configuration or boot the system into single user or maintenance mode, which could result in Denial of Service or unauthorized privileged access to the system.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Consult vendor documentation for procedures concerning the system's boot loader. Configure the boot loader to hash boot loader passwords using MD5 or a stronger hash.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Group-ID|V-24624, Rule-ID|SV-37938r1_rule, STIG-ID|GEN008710, Vuln-ID|V-24624

Plugin: Unix

Control ID: f7c0758d631274eddc49ad85d4273144011f1d84bb4d09b059c1723941812398