UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Unencrypted FTP must not be used on the system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-12010 GEN004800 SV-45876r1_rule Medium
Description
: FTP is typically unencrypted and presents confidentiality and integrity risks. FTP may be protected by encryption in certain cases, such as when used in a Kerberos environment. SFTP and FTPS are encrypted alternatives to FTP.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2016-12-20

Details

Check Text ( C-43193r1_chk )
Perform the following to determine if unencrypted FTP or Telnet are enabled:

# chkconfig --list pure-ftpd

# chkconfig --list telnet
# chkconfig --list gssftp
# chkconfig --list vsftpd


If any of these services are found, ask the SA if these services are encrypted. If they are not, this is a finding.
Fix Text (F-39254r1_fix)
Disable the Telnet and FTP daemons.

Procedure:
# chkconfig pure-ftpd off
# chkconfig telnet off
# chkconfig gssftp off
# chkconfig vsftpd off