The TFTP daemon must operate in "secure mode" which provides access only to a single directory on the host file system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-847 | GEN005080 | SV-847r2_rule | ECSC-1 | High |
| Description |
|---|
| Secure mode limits TFTP requests to a specific directory. If TFTP is not running in secure mode, it may be able to write to any file or directory and may seriously impair system integrity, confidentiality, and availability. |
| STIG | Date |
|---|---|
| VMware ESX 3 Server | 2016-05-13 |
Details
| Check Text ( C-713r2_chk ) |
|---|
| Determine if tftpd is running in secure mode. If tftpd is running and not using secure mode, this is a finding. |
| Fix Text (F-1001r2_fix) |
|---|
| Configure tftpd to run in secure mode. |