Installation of a compiler on production web server must be prohibited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-2236	WG080 W22	SV-33061r1_rule	ECSC-1	Medium

Description
The presence of a compiler on a production server facilitates the malicious user’s task of creating custom versions of programs and installing Trojan Horses or viruses. For example, the attacker’s code can be uploaded and compiled on the server under attack.

STIG	Date
APACHE SERVER 2.2 for Windows	2013-04-11

Details

Check Text ( C-33733r1_chk )
Using Windows Explorer, search the system for the existence of known compilers such as msc.exe, msvc.exe, Python.exe, javac.exe, Lcc-win32.exe, or equivalent. Look in all hard drives. Also, query the SA and the Web Manager to determine if a compiler is present on the server. Query the SA and the Web Manager to determine if a compiler is present on the server. If a compiler is present, this is a finding.

Check Text ( C-33733r1_chk )

Using Windows Explorer, search the system for the existence of known compilers such as msc.exe, msvc.exe, Python.exe, javac.exe, Lcc-win32.exe, or equivalent. Look in all hard drives.

Also, query the SA and the Web Manager to determine if a compiler is present on the server.

Query the SA and the Web Manager to determine if a compiler is present on the server. If a compiler is present, this is a finding.

Fix Text (F-29368r1_fix)
Remove any compiler found on the production web server.