Detections
Analytics

GEN002640 - Default system accounts must be disabled or removed - 'uucp'

Information

Vendor accounts and software may contain backdoors allowing unauthorized access to the system. These backdoors are common knowledge and present a threat to system security if the account is not disabled.

Solution

Lock the default system account(s).
# passwd -l <user>

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5e., CAT|II, CCI|CCI-000178, Group-ID|V-810, Rule-ID|SV-37903r1_rule, STIG-ID|GEN002640, Vuln-ID|V-810

Plugin: Unix

Control ID: 7e81adae66a51ddb2187671c28df4af590bbd51e0021d50ec791d4eb989138c1