Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4702 | GEN004840 | SV-4702r2_rule | ECSC-1 | Medium |
Description |
---|
Anonymous FTP is a public data service which is only permitted in a server capacity when located on the DMZ network. |
STIG | Date |
---|---|
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-04-10 |
Check Text ( C-712r2_chk ) |
---|
Use the command ftp to connect the system's FTP service. Attempt to log into this host with a user name of anonymous and a password of guest (also try the password of guest@mail.com). If the logon is not successful, this check is not applicable. Ask the SA if the system is located on a DMZ network. If the system is not located on a DMZ network, this is a finding. |
Fix Text (F-4630r2_fix) |
---|
Move the system to a DMZ network. |