Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The VNC server package must not be installed unless required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216295 | SOL-11.1-020180 | SV-216295r959010_rule | Medium |
| Description |
|---|
| The VNC service uses weak authentication capabilities and provides the user complete graphical system access. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2024-05-30 |
Details
| Check Text ( C-17531r370973_chk ) |
|---|
| Determine if the VNC server package is installed. # pkg list x11/server/xvnc If an installed package named "x11/server/xvnc is listed" is listed, this is a finding. |
| Fix Text (F-17529r370974_fix) |
|---|
| The Software Installation Profile is required. # pfexec pkg uninstall x11/server/xvnc |