Detections
Analytics
GEN003980 - The traceroute command must be group-owned by sys, bin, root, or system.
Information
If the group owner of the traceroute command has not been set to a system group, unauthorized users could have access to the command and use it to gain information regarding a network's topology inside of the firewall. This information may allow an attacker to determine trusted routers and other network information potentially leading to system and network compromise.Solution
Change the group-owner of the traceroute command to root.Procedure:
# chgrp root /bin/traceroute
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-4370, Rule-ID|SV-37464r1_rule, STIG-ID|GEN003980, Vuln-ID|V-4370
Plugin: Unix
Control ID: 2977932c8a31a56ad03b03d6b27cdbc10104944aa3dc37c40bfd2d1767575eef