Detections
Analytics
2.2.2 Ensure ftp server services are not in use
Information
FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and clients over a network, especially where no authentication is necessary (permits anonymous users to connect to a server). FreeBSD ships with one basic ftpd in the base system and there is also the famous vsftpd available through package.FTP does not protect the confidentiality of data or authentication credentials. Unless there is a need to run the system as a FTP server (for example, to allow anonymous downloads), it is recommended that the package be deleted to reduce the potential attack surface.
Solution
Run the following commands to stop vsftpd / vsftpd6 and remove vsftpd packages:# service onestop vsftpd
# service onestop vsftpd6
# pkg remove -g 'vsftpd*'
-OR-
-IF- the packages is required as a dependency:
Run the following commands to stop and disable the vsftpd or vsftpd6 service:
# service vsftpd onestop
# service vsftpd6 onestop
# service vsftpd onedisable
# service vsftpd6 onedisable
Note: Other ftp server packages may exist. If not required and authorized by local site policy, they should also be removed. If the package is required for a dependency, the service should be stopped and disabled.
Impact:
ftpd from the base system is run through inetd server which cannot be removed but disabled.
There may be packages that are dependent on the vsftpd-ext or vsftpd-ssl package. If the packages are removed, these dependent packages will be removed as well. Before removing the packages, review any dependent packages to determine if they are required on the system.
-IF- a dependent package is required: stop and disable the vsftpd and vsftpd6 services leaving the packages installed.
See Also
Item Details
Audit Name: CIS FreeBSD 14 v1.0.1 L1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2
Plugin: Unix
Control ID: a04c5812e9c0e19216c9f0d9abc3cce80322f79f3224271a41ee4879c3fc669f