UCF STIG Viewer Logo

The network element must have the Finger service disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3079 NET0730 SV-15305r2_rule Low
Description
The finger service supports the UNIX finger protocol, which is used for querying a host about the users that are logged on. This service is not necessary for generic users. If an attacker were to find out who is using the network, they may use social engineering practices to try to elicit classified DoD information.
STIG Date
Perimeter Router Security Technical Implementation Guide Cisco 2018-11-28

Details

Check Text ( C-12701r2_chk )
Review the device configuration. Beginning with IOS 12.1(5), finger is disabled by default. For IOS version 12.0 through 12.1(4), verify that the no ip finger command is present. For any version prior to 12.0, verify that the no service finger command is present.
Fix Text (F-3104r4_fix)
Configure the device to disable the Finger service.