The SNMP service must use only SNMPv3 or its successors.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-226970 | GEN005305 | SV-226970r603265_rule | Medium |
| Description |
|---|
| SNMP Versions 1 and 2 are not considered secure. Without the strong authentication and privacy provided by the SNMP Version 3 User-based Security Model (USM), an attacker or other unauthorized users may gain access to detailed system management information and use the information to launch attacks against the system. |
| STIG | Date |
|---|---|
| Solaris 10 SPARC Security Technical Implementation Guide | 2022-09-07 |
Details
| Check Text ( C-29132r485240_chk ) |
|---|
| Verify the SNMP daemon is not configured to use the v1 or v2c security models. # egrep '(v1|v2c|community|com2sec)' /etc/sma/snmp/snmpd.conf /var/sma_snmp/snmpd.conf /etc/snmp/conf/snmpd.conf /usr/sfw/lib/sma_snmp/snmpd.conf | grep -v '^#' If any configuration is found, this is a finding. |
| Fix Text (F-29120r485241_fix) |
|---|
| Edit non-compliant snmpd.conf files and remove references to the v1, v2c, community, or com2sec. Restart the SNMP service. # svcadm restart svc:/application/management/sma:default |