The SMTP service's SMTP greeting must not provide version information.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4384	GEN004560	SV-38436r1_rule	ECSC-1	Low

Description
The version of the SMTP service can be used by attackers to plan an attack based on vulnerabilities present in the specific version.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2018-09-14

Details

Check Text ( C-36570r1_chk )
To check for the Sendmail version being displayed in the greeting: # telnet localhost 25 If a version number is displayed, this is a finding.

Fix Text (F-31938r1_fix)
Ensure Sendmail or its equivalent has been configured to mask the version information. If necessary, change the O SmtpGreetingMessage line in the /etc/sendmail.cf file as noted below: O SmtpGreetingMessage=$j Sendmail $v/$Z; $b change it to: O SmtpGreetingMessage= Mail Server Ready ; $b Then restart the Sendmail service.