Detections
Analytics

GEN005000 - Anonymous FTP accounts must not have a functional shell.

Information

If an anonymous FTP account has been configured to use a functional shell, attackers could gain access to the shell if the account is compromised.

Solution

Configure anonymous FTP accounts to use a non-functional shell. If necessary, edit the /etc/passwd file to remove any functioning shells associated with the ftp account and replace them with non-functioning shells, such as /dev/null.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|I, CCI|CCI-000225, Group-ID|V-4387, Rule-ID|SV-37549r2_rule, STIG-ID|GEN005000, Vuln-ID|V-4387

Plugin: Unix

Control ID: 44d7c8fa953cdff1d25bc41a659087c9ea5e66794a42a86b55316a2b9b7a7150