Solaris 10 X86 Security Technical Implementation Guide

The Solaris 10 X86 Security Technical Implementation Guide (V2 R4) has 513 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

513STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

The Sendmail service must not have the wizard backdoor active.

Solaris 10 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

The Sendmail service must not have the wizard backdoor active.

Description

Discussion Text

Very old installations of the Sendmail mailing system contained a feature whereby a remote user connecting to the SMTP port can enter the WIZ command and be given an interactive shell with root privileges.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-227850

Rule

SV-227850r603266_rule

Severity

low

Rule Version

GEN004700

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Locate the sendmail.cf configuration file and check for wiz configuration.

Procedure:
# find / -name sendmail.cf -print
# grep -v "^#" <sendmail.cf location> |grep -i wiz

If an entry is found for wiz, this is a finding.

Implementation Procedure

Fix Text

If the WIZ command is enabled on Sendmail, it should be disabled by adding this line to the sendmail.cf configuration file (it must be typed in uppercase).

OW*

For the change to take effect, kill the Sendmail process, refreeze the sendmail.cf file, and restart the Sendmail process.

STIG check 373 of 513 in the Solaris 10 X86 STIG checklist

← Previous · V-227849The SMTP service must not have the VRFY feature active.Next · V-227851 →Mail relaying must be restricted.