Detections
Analytics

GEN004540 - The SMTP service HELP command must not be enabled.

Information

The HELP command should be disabled to mask version information. The version of the SMTP service software could be used by attackers to target vulnerabilities present in specific software versions.

Solution

To disable the SMTP HELP command, clear the Sendmail help file.
# echo > /etc/mail/helpfile

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220099r603266_rule, STIG-ID|GEN004540, STIG-Legacy|SV-42309, STIG-Legacy|V-12006, Vuln-ID|V-220099

Plugin: Unix

Control ID: 823f6821f8fb43d9f76173e94c600c690f31d9ea52bab4803154f03ffb01dfb5