Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The TFTP service daemon must not be installed unless required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-47913 | SOL-11.1-020140 | SV-60785r1_rule | High |
| Description |
|---|
| TFTP is an insecure protocol. |
| STIG | Date |
|---|---|
| Solaris 11 X86 Security Technical Implementation Guide | 2015-04-03 |
Details
| Check Text ( C-50349r1_chk ) |
|---|
| Determine if the TFTP package is installed. # pkg list service/network/tftp If an installed package named "solaris/service/network/tftp" is listed and not required for operations, this is a finding. |
| Fix Text (F-51525r1_fix) |
|---|
| The Software Installation Profile is required. # pfexec pkg uninstall service/network/tftp |