SecureScoutLogo.jpg
Incorrect System Clock Vulnerability



Go to Vulnerabilities List


General Info


TC: 11012
Description: When a system does not report the correct time, it can result in errors produced by other utilities using time based functions. Timestamps and log entries can become unmanageable and may no longer be reliable.
TC Impact: Gather Info



Specific Operations and Actions:


Vulnerability Publication: N.A.
Advisory Copyright: N.A.
Summary: A bad system clock can induce errors in the management of your network.
Risk: Low
CVSS 2.0 metrics: Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality Impact: None
Integrity Impact: None
Availability Impact: None
CVSS 2.0 Base Score: 0.0
Vulnerability Impact: Attack
Host Impact: Incorrect system clock can induce mistakes and create difficulties in the understanding of log and timestamp entries.
Nature of Remediation: Configuration corrections.
Step required to fix the reported vulnerability:

***** Solution type: Update Configuration *****

Set your system time correctly. Use of NTP (Network Time Protocol) to synchronize your system clock is recommended.



Glossary and References :


References:
* MISC: RFC 778
http://www.ietf.org/rfc/rfc0778.txt
* MISC: timed -- time server daemon
http://netbsd.gw.com/cgi-bin/man-cgi?timed 8

CVE Link: GENERIC-MAP-NOMATCH
CVE Compatible

Glossary: ICMP
NTP
Target System
Time Service


© 2003-2010 NexantiS Corporation (www.securescout.com)
SecureScout is a trademark of NexantiS
All Rights Reserved
All products names referenced herein are trademarks of their respective companies

SecureScout products are certified:
CVE Compatible
SANS TOP 20 Compatible
CVSS Compatible (Common Vulnerability Scoring System)