Detections
Analytics

GEN004820 - Anonymous FTP must not be active on the system unless authorized.

Information

Due to the numerous vulnerabilities inherent in anonymous FTP, it is recommended that it not be used. If anonymous FTP must be used on a system, the requirement must be authorized and approved in the system accreditation package.

Solution

Configure the FTP service to not permit anonymous logins.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227853r603266_rule, STIG-ID|GEN004820, STIG-Legacy|SV-846, STIG-Legacy|V-846, Vuln-ID|V-227853

Plugin: Unix

Control ID: 6da74726886eeed787d51d92ec1132af46287b19ba0702110552577d871007d6