The Sendmail server must have the debug feature disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4690 | GEN004620 | SV-4690r6_rule | ECSC-1 | High |
| Description |
|---|
| Debug mode is a feature present in older versions of Sendmail which, if not disabled, may allow an attacker to gain access to a system through the Sendmail service. |
| STIG | Date |
|---|---|
| Draft AIX Security Technical Implementation Guide | 2011-08-17 |
Details
| Check Text ( C-652r3_chk ) |
|---|
| Check for an enabled "debug" command provided by the SMTP service. Procedure: # telnet localhost 25 debug If the command does not return a 500 error code of command unrecognized, this is a finding. |
| Fix Text (F-4618r2_fix) |
|---|
| Obtain and install a more recent version of Sendmail, which does not implement the DEBUG feature. |