Detections
Analytics

GEN003850 - The telnet daemon must not be running - 'chkconfig'

Information

The telnet daemon provides a typically unencrypted remote access service which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised.

Solution

Identify the telnet service running and disable it.

Procedure:

Disable the telnet server.
# chkconfig telnet off

Verify the telnet daemon is no longer running.
# ps -ef |grep telnet

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(c), CAT|I, CCE|CCE-3390-2, CCI|CCI-000197, Group-ID|V-24386, Rule-ID|SV-37444r1_rule, STIG-ID|GEN003850, Vuln-ID|V-24386

Plugin: Unix

Control ID: b8c345d819328e38e780011bc51626cc3df7363a304078c8fd5c47083e630f57