Detections
Analytics

SOL-11.1-020530 - X displays must not be exported to the world.

Information

Open X displays allow an attacker to capture keystrokes and to execute commands remotely. Many users have their X Server set to xhost +, permitting access to the X Server by anyone, from anywhere.

Solution

If using an xhost-type authentication the xhost - command can be used to remove current trusted hosts and then selectively allow only trusted hosts to connect with xhost + commands. A cryptographically secure authentication, such as provided by the xauth program, is always preferred. Refer to your X11 server's documentation for further security information.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R4_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-6b., CAT|I, CCI|CCI-000225, CCI|CCI-000366, Rule-ID|SV-216311r959010_rule, STIG-ID|SOL-11.1-020530, STIG-Legacy|SV-75493, STIG-Legacy|V-61025, Vuln-ID|V-216311

Plugin: Unix

Control ID: c5a664b947722e2ccb0eeb24fd55978d812e9f9531b5e1f7ee976a1767b5b4d5