The SMTP service must not have a uudecode alias active.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN004640-ESXI5-PNF	GEN004640-ESXI5-PNF	GEN004640-ESXI5-PNF_rule		High

Description
A common configuration for older Mail Transfer Agents (MTAs) includes an alias for the decode user. All mail sent to this user is sent to the uudecode program, which automatically converts and stores files. By sending mail to decode or uudecode aliases present on some systems, a remote attacker may be able to create or overwrite files on the remote host. This could possibly be used to gain remote access. Applicable, but permanent not-a-finding - No alias.

Description

A common configuration for older Mail Transfer Agents (MTAs) includes an alias for the decode user. All mail sent to this user is sent to the uudecode program, which automatically converts and stores files. By sending mail to decode or uudecode aliases present on some systems, a remote attacker may be able to create or overwrite files on the remote host. This could possibly be used to gain remote access. Applicable, but permanent not-a-finding - No alias.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN004640-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-GEN004640-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.