Check: GEN005280
HP-UX 11.31 STIG:
GEN005280
(in versions v1 r19 through v1 r13)
Title
The system must not have the UUCP service active. (Cat II impact)
Discussion
The UUCP utility is designed to assist in transferring files, executing remote commands, and sending e-mail between UNIX systems over phone lines and direct connections between systems. The UUCP utility is a primitive and arcane system with many security issues. There are alternate data transfer utilities/products that can be configured to more securely transfer data by providing for authentication as well as encryption.
Check Content
# cat /etc/inetd.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | grep -v "^#" | grep -i uucp If uucp is found enabled, this is a finding.
Fix Text
Edit /etc/inetd.conf and comment the uucp service entry. Restart the inetd service. # inetd -c
Additional Identifiers
Rule ID: SV-35171r1_rule
Vulnerability ID: V-4696
Group Title: GEN005280
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001436 |
The organization disables organization-defined networking protocols within the information system deemed to be nonsecure except for explicitly identified components in support of specific operational requirements. |
Controls
Number | Title |
---|---|
No controls are assigned to this check |