Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-226959 | GEN005100 | SV-226959r505925_rule | High |
Description |
---|
If TFTP runs with the setuid or setgid bit set, it may be able to write to any file or directory and may seriously impair system integrity, confidentiality, and availability. |
STIG | Date |
---|---|
Solaris 10 SPARC Security Technical Implementation Guide | 2020-09-04 |
Check Text ( C-29121r485204_chk ) |
---|
Check the mode of the TFTP daemon. Procedure: # ls -lL /usr/sbin/in.tftpd If the mode of the file is more permissive than 0755, this is a finding. |
Fix Text (F-29109r485205_fix) |
---|
Change the mode of the TFTP daemon. Procedure: # chmod 0755 /usr/sbin/in.tftpd |