NIST is releasing supplemental USGCB SCAP 1.0 content for Windows due to an
issue that has been identified with the current content. This issue may cause
excessive directory server performance degradation or system failure. The
supplemental content will use an alternate method for checking the file
effective rights in the USGCB content that avoids the performance issue.
Although this alternate method is a valid SCAP 1.0 checking method, it was not
part of the SCAP 1.0 Validation Program; therefore, NIST cannot post the content
as Tier IV content as defined by SP 800-70rev2. For users who are experiencing
directory server performance issues caused by the existing USGCB content, the
supplemental USGCB SCAP 1.0 content will be available on the NIST USGCB web site
within two months of the publication date of this notice.
discovered 11 months ago