5.1.7 Ensure tftp-server is not enabled

Information

Trivial File Transfer Protocol (TFTP) is a simple file transfer protocol, typically used to
automatically transfer configuration or boot machines from a boot server. The packages
tftp and atftp are both used to define and support a TFTP server.

*Rationale*

TFTP does not support authentication nor does it ensure the confidentiality or integrity of
data. It is recommended that TFTP be removed, unless there is a specific need for TFTP. In
that case, extreme caution must be used when configuring the services.

Solution

Remove or comment out any tftp lines in /etc/inetd.conf-#tftp stream tcp nowait root internal

See Also

https://workbench.cisecurity.org/files/91

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 6dcbfb7da09d5559fee8fbb4d88bd7f02699261b8fd38e374a3a7327dae7bf86