Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-12006 | GEN004540 | SV-37504r3_rule | ECSC-1 | Medium |
Description |
---|
The HELP command should be disabled to mask version information. The version of the SMTP service software could be used by attackers to target vulnerabilities present in specific software versions. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2015-03-12 |
Check Text ( C-36162r2_chk ) |
---|
Check if Help is disabled. This rule is for "sendmail" only and not applicable to "Postfix". Procedure: # telnet localhost 25 > help If the help command returns any sendmail version information, this is a finding. If sendmail is not installed this check is not applicable. |
Fix Text (F-31413r2_fix) |
---|
To disable the SMTP HELP command, clear the Sendmail help file. # echo > /etc/mail/helpfile |