Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4696 | GEN005280 | SV-37688r1_rule | ECSC-1 | Medium |
Description |
---|
The UUCP utility is designed to assist in transferring files, executing remote commands, and sending e-mail between UNIX systems over phone lines and direct connections between systems. The UUCP utility is a primitive and arcane system with many security issues. There are alternate data transfer utilities/products that can be configured to more securely transfer data by providing for authentication as well as encryption. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2015-03-12 |
Check Text ( C-36881r1_chk ) |
---|
# service uucp status if UUCP is "running", this is a finding. |
Fix Text (F-31895r1_fix) |
---|
# chkconfig uucp off # service uucp stop # service xinetd restart |