UCF STIG Viewer Logo

Unencrypted FTP must not be used on the system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227852 GEN004800 SV-227852r603266_rule Medium
Description
FTP is typically unencrypted and, therefore, presents confidentiality and integrity risks. FTP may be protected by encryption in certain cases, such as when used in a Kerberos environment. SFTP and FTPS are encrypted alternatives to FTP.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-30014r489949_chk )
Perform the following to determine if unencrypted FTP is enabled.

# svcs ftp

If FTP is enabled, ask the SA if it is encrypted. If it is not, this is a finding.
Fix Text (F-30002r489950_fix)
# svcadm disable ftp