Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The telnet-server package must not be installed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-38587 | RHEL-06-000206 | SV-50388r1_rule | High |
| Description |
|---|
| Removing the "telnet-server" package decreases the risk of the unencrypted telnet service's accidental (or intentional) activation. Mitigation: If the telnet-server package is configured to only allow encrypted sessions, such as with Kerberos or the use of encrypted network tunnels, the risk of exposing sensitive information is mitigated. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2016-12-16 |
Details
| Check Text ( C-46144r1_chk ) |
|---|
| Run the following command to determine if the "telnet-server" package is installed: # rpm -q telnet-server If the package is installed, this is a finding. |
| Fix Text (F-43535r1_fix) |
|---|
| The "telnet-server" package can be uninstalled with the following command: # yum erase telnet-server |