Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The telnet-server package must not be installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-50551 | OL6-00-000206 | SV-64757r1_rule | High |
| Description |
|---|
| Removing the "telnet-server" package decreases the risk of the unencrypted telnet service's accidental (or intentional) activation. Mitigation: If the telnet-server package is configured to only allow encrypted sessions, such as with Kerberos or the use of encrypted network tunnels, the risk of exposing sensitive information is mitigated. |
| STIG | Date |
|---|---|
| Oracle Linux 6 Security Technical Implementation Guide | 2016-12-20 |
Details
| Check Text ( C-53073r1_chk ) |
|---|
| Run the following command to determine if the "telnet-server" package is installed: # rpm -q telnet-server If the package is installed, this is a finding. |
| Fix Text (F-55349r1_fix) |
|---|
| The "telnet-server" package can be uninstalled with the following command: # yum erase telnet-server |