UCF STIG Viewer Logo

The system must not have the finger service active.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4701 GEN003860 SV-27440r1_rule DCPP-1 EBRU-1 Low
Description
The finger service provides information about the system's users to network clients. This information could expose information that could be used in subsequent attacks.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28626r1_chk )
# grep -v "^#" /etc/inetd.conf |grep finger
If the finger service is not disabled, this is a finding.
Fix Text (F-24712r1_fix)
Edit /etc/inetd.conf and comment out the finger service line. Restart the inetd service.