STIGQter: STIG Summary: Oracle Database 11g Installation STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

The Oracle listener.ora file should specify IP addresses rather than host names to identify hosts.

DISA Rule

SV-24952r1_rule

Vulnerability Number

V-16031

Group Title

Oracle Listener host references

Rule Version

DO6746-ORACLE11

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit the listener.ora file and replace any HOST= [hostname or domain name] to use static IP addresses for the host.

The listener.ora file is by default located in the ORACLE_HOME/network/admin directory or the directory specified in the TNS_ADMIN environment variable for the listener service or process owner account.

Check Contents

If a listener is not running on the local database host server, this check is Not a Finding.

Review all listener.ora files for the HOST =.

Verify the HOST = value specifies an IP address for all occurrences of the HOST = setting.

Sample:

(ADDRESS= (PROTOCOL=TCP) (HOST= [host IP address]) (PORT=1521))

If any addresses specify a host name in place of an IP or other network address, this is a Finding.

NOTE: If a host name is used, ensure it can be locally resolved to an IP address on the DBMS system using a host table, however, if a hostname is used, it is still a Finding.

Vulnerability Number

V-16031

Documentable

False

Rule Version

DO6746-ORACLE11

Severity Override Guidance

If a listener is not running on the local database host server, this check is Not a Finding.

Review all listener.ora files for the HOST =.

Verify the HOST = value specifies an IP address for all occurrences of the HOST = setting.

Sample:

(ADDRESS= (PROTOCOL=TCP) (HOST= [host IP address]) (PORT=1521))

If any addresses specify a host name in place of an IP or other network address, this is a Finding.

NOTE: If a host name is used, ensure it can be locally resolved to an IP address on the DBMS system using a host table, however, if a hostname is used, it is still a Finding.

Check Content Reference

M

Responsibility

Database Administrator

Target Key

1368

Comments