Detections
Analytics
WN25-00-000430 - Windows Server 2025 FTP servers must be configured to prevent access to the system drive.
Information
The FTP service allows remote users to access shared files and directories that could provide access to system resources and compromise the system, especially if the user can gain access to the root directory of the boot drive.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R4_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-278028r1268251_rule, STIG-ID|WN25-00-000430, Vuln-ID|V-278028
Plugin: Windows
Control ID: 2ac0e0b06238c47d4e1211efb72754e7c4f3cdcce7d6e00fd6eccf0474dbee96