Detections
Analytics

GEN005000 - Anonymous FTP accounts must not have a functional shell.

Information

If an anonymous FTP account has been configured to use a functional shell, attackers could gain access to the shell if the account is compromised.

Solution

Configure anonymous FTP accounts to use a non-functional shell. If necessary, edit the /etc/passwd file to remove any functioning shells associated with the FTP account and replace them with non-functioning shells, such as, /dev/null.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|I, CCI|CCI-000225, Rule-ID|SV-4387r2_rule, STIG-ID|GEN005000, Vuln-ID|V-4387

Plugin: Unix

Control ID: c1fa0083384f95b2049225e30a28ca74fd86d0250d1891d5016309c623ab2e1e