UCF STIG Viewer Logo

tc Server UI must disable the shutdown port.


Overview

Finding ID Version Rule ID IA Controls Severity
V-89073 VROM-TC-000885 SV-99723r1_rule Medium
Description
An attacker has at least two reasons to stop a web server. The first is to cause a DoS, and the second is to put in place changes the attacker made to the web server configuration. As a Tomcat derivative, tc Server uses a port (defaults to 8005) as a shutdown port. If enabled, a shutdown signal can be sent to tc Server through this port. To ensure availability, the shutdown port should be disabled.
STIG Date
VMware vRealize Operations Manager 6.x tc Server Security Technical Implementation Guide 2018-10-12

Details

Check Text ( C-88765r1_chk )
At the command prompt, execute the following command:

grep base.shutdown.port /usr/lib/vmware-vcops/tomcat-web-app/conf/catalina.properties

If the value of "base.shutdown.port" is not set to "-1" or is missing, this is a finding.
Fix Text (F-95815r1_fix)
Navigate to and open /usr/lib/vmware-vcops/tomcat-web-app/conf/catalina.properties.

Navigate to the "base.shutdown.port" setting.

Add the setting 'base.shutdown.port=-1' to the "catalina.properties" file.