Detections
Analytics

3.2 Disable the Shutdown port

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Tomcat listens on TCP port 8005 to accept shutdown requests. By connecting to this port and sending the SHUTDOWN command, all applications within Tomcat are halted. The shutdown port is not exposed to the network as it is bound to the loopback interface. If this functionality is not used, it is recommended that the Shutdown port be disabled.

Solution

Set the port to -1 in the $CATALINA_HOME/conf/server.xml file: <Server port="-1" shutdown="SHUTDOWN">

See Also

https://workbench.cisecurity.org/files/267

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7

Plugin: Unix

Control ID: ac57e38c4e0cb848cad8e9e2842c7af81fa0c22577c68dfbcaad8d5a2b34c727