Check: GEN004620
HP-UX 11.23 STIG:
GEN004620
(in version v1 r8)
Title
The Sendmail server must have the debug feature disabled. (Cat I impact)
Discussion
Debug mode is a feature present in older versions of Sendmail which, if not disabled, may allow an attacker to gain access to a system through the Sendmail service.
Check Content
Check for an enabled debug command provided by the SMTP service. # telnet localhost 25 debug If the command does not return a 500 error code of command unrecognized, this is a finding.
Fix Text
Obtain and install a more recent version of Sendmail, which does not implement the DEBUG feature.
Additional Identifiers
Rule ID: SV-35070r1_rule
Vulnerability ID: V-4690
Group Title: GEN004620
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |