Check: GEN003820
VMware ESX 3 Server:
GEN003820
(in version v1 r2)
Title
The rsh daemon must not be running. (Cat I impact)
Discussion
The rshd process provides a typically unencrypted, host-authenticated remote access service. SSH should be used in place of this service.
Check Content
Verify the rshd service is not running.
Fix Text
Disable the rshd service.
Additional Identifiers
Rule ID: SV-4687r2_rule
Vulnerability ID: V-4687
Group Title: GEN003820
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000068 |
The information system implements cryptographic mechanisms to protect the confidentiality of remote access sessions. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-17 (2) |
Protection Of Confidentiality / Integrity Using Encryption |