Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-848 | GEN005100 | SV-40392r1_rule | ECPA-1 | High |
Description |
---|
If TFTP runs with the setuid or setgid bit set, it may be able to write to any file or directory and may seriously impair system integrity, confidentiality, and availability. |
STIG | Date |
---|---|
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2017-01-27 |
Check Text ( None ) |
---|
None |
Fix Text (F-34365r1_fix) |
---|
Change the mode of the TFTP daemon. Procedure: # chmod 0755 /usr/sbin/in.tftpd |