UCF STIG Viewer Logo

The SMTP service HELP command must not be enabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-240443 VRAU-SL-000610 SV-240443r671070_rule Medium
Description
The HELP command should be disabled to mask version information. The version of the SMTP service software could be used by attackers to target vulnerabilities present in specific software versions.
STIG Date
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2021-06-24

Details

Check Text ( C-43676r671068_chk )
Check the permissions of the sendmail helpfile:

ls -al /usr/lib/sendmail.d/helpfile

If the permissions are not "0000", this is a finding.
Fix Text (F-43635r671069_fix)
Run the following command to disable the sendmail helpfile:

# chmod 0000 /usr/lib/sendmail.d/helpfile