Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The TFTP service daemon must not be installed unless required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-47913 | SOL-11.1-020140 | SV-60785r2_rule | High |
| Description |
|---|
| TFTP is an insecure protocol. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2017-01-05 |
Details
| Check Text ( C-50349r2_chk ) |
|---|
| Determine if the TFTP package is installed. # pkg list service/network/tftp If an installed package named "/service/network/tftp" is listed and not required for operations, this is a finding. |
| Fix Text (F-51525r2_fix) |
|---|
| The Software Installation Profile is required. # pfexec pkg uninstall install/installadm # pfexec pkg uninstall service/network/tftp |