Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Installation of a compiler on production web server is prohibited.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-2236 | WG080 A22 | SV-32956r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The presence of a compiler on a production server facilitates the malicious user’s task of creating custom versions of programs and installing Trojan Horses or viruses. For example, the attacker’s code can be uploaded and compiled on the server under attack. |
| STIG | Date |
|---|---|
| APACHE SITE 2.2 for Unix | 2013-04-11 |
Details
| Check Text ( C-33638r1_chk ) |
|---|
| Query the SA and the Web Manager to determine if a compiler is present on the server. If a compiler is present, this is a finding. |
| Fix Text (F-29279r1_fix) |
|---|
| Remove any compiler found on the production web server. |