HP-UX 11.31 Security Technical Implementation Guide

The HP-UX 11.31 Security Technical Implementation Guide (V1 R19) has 525 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

525STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R19

CurrentPublished Fri Jan 25 2019

Anonymous FTP must not be active on the system unless authorized.

HP-UX 11.31 Security Technical Implementation Guide

Assessment Title

Rule Text

Anonymous FTP must not be active on the system unless authorized.

Description

Discussion Text

Due to the numerous vulnerabilities inherent in anonymous FTP, it is not recommended for use. If anonymous FTP must be used on a system, the requirement must be authorized and approved in the system accreditation package.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-846

Rule

SV-35100r1_rule

Severity

medium

Rule Version

GEN004820

Documentable

true

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Attempt to log in with anonymous or ftp. The user can type any string of characters as a password. (By convention, the 
password is the host name of the user's host or the user's email address.)  The anonymous user is then given access only to user ftp's home directory, usually called /home/ftp.
 
If the login is successful, this is a finding.

Implementation Procedure

Fix Text

Configure the FTP service to not permit anonymous logins. 
Remove the user(s) ftp and/or anonymous from the /etc/passwd file.

STIG check 466 of 525 in the HP-UX 11.31 STIG checklist

← Previous · V-845The FTP daemon must be configured for logging or verbose mode.Next · V-847 →The TFTP daemon must operate in "secure mode" which provides access only to a single directory on the host file system.