Detections
Analytics

2.2.4 Ensure tftp client is not installed

Information

Trivial File Transfer Protocol (TFTP) is a simple protocol for exchanging files between two TCP/IP machines. TFTP servers allow connections from a TFTP Client for sending and receiving files.

TFTP does not have built-in encryption, access control or authentication. This makes it very easy for an attacker to exploit TFTP to gain access to files.

Solution

Run the following command to remove tftp :

# dnf remove tftp

Impact:

Removing the tftp client prevents TFTP file transfers from this host (for example, fetching network device configuration or firmware images).

See Also

https://workbench.cisecurity.org/benchmarks/27891

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 6b9e4d3d11c3b9eaaaef087af91971d6c1a1f7abae525188098ef39ff6997913