UCF STIG Viewer Logo

The telnet daemon must not be running.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227826 GEN003850 SV-227826r603266_rule High
Description
The telnet daemon provides a typically unencrypted remote access service which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised. Satisfies: SRG-OS-000074, SRG-OS-000520
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-29988r489844_chk )
Determine if the telnet daemon is running.

# svcs telnet

If the telnet service is enabled, this is a finding.
Fix Text (F-29976r489845_fix)
Disable the telnet daemon.

# svcadm disable telnet
# svcadm refresh inetd