Check: GEN000000-LNX00300
VMware ESX 3 Server:
GEN000000-LNX00300
(in version v1 r2)
Title
The system must not have the rpc.ugidd daemon enabled. (Cat II impact)
Discussion
The rpc.ugidd daemon could be used by a remote attacker to list all users on a specific system. Once the user IDs have been obtained, a system could be compromised through brute-force password hacking.
Check Content
To check for the rpc.ugidd daemon perform: # chkconfig –list rpc.ugidd Or # ps –ef | grep –i ugidd If the daemon is running or installed this is a finding.
Fix Text
If the rpc.ugidd daemon is installed, disable it using the chkconfig utility.
Additional Identifiers
Rule ID: SV-4262r2_rule
Vulnerability ID: V-4262
Group Title: GEN000000-LNX00300
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| No CCIs are assigned to this check |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |