UCF STIG Viewer Logo

The SMTP service's SMTP greeting must not provide version information.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4384 GEN004560 SV-4384r2_rule ECSC-1 Low
Description
The version of the SMTP service can be used by attackers to plan an attack based on vulnerabilities present in the specific version.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-8267r2_chk )
Check for the Sendmail version being displayed in the greeting.

# telnet localhost 25

If a version number is displayed, this is a finding.
Fix Text (F-4295r2_fix)
Ensure Sendmail or its equivalent has been configured to mask the version information. If necessary, change the O SmtpGreetingMessage line in the /etc/mail/sendmail.cf file as noted below.
O SmtpGreetingMessage=$j Sendmail $v/$Z; $b
Change it to:
O SmtpGreetingMessage= Mail Server Ready ; $b