VMware ESX 3 Server

The VMware ESX 3 Server (V1 R2) has 630 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

630STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

The system must not have the rpc.ugidd daemon enabled.

VMware ESX 3 Server

Assessment Title

Rule Text

The system must not have the rpc.ugidd daemon enabled.

Description

Discussion Text

The rpc.ugidd daemon could be used by a remote attacker to list all users on a specific system. Once the user IDs have been obtained, a system could be compromised through brute-force password hacking.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-4262

Rule

SV-4262r2_rule

Severity

medium

Rule Version

GEN000000-LNX00300

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To check for the rpc.ugidd daemon perform:

   #   chkconfig –list rpc.ugidd

Or

   # ps –ef | grep –i ugidd

If the daemon is running or installed this is a finding.

Implementation Procedure

Fix Text

If the rpc.ugidd daemon is installed, disable it using the chkconfig utility.

STIG check 435 of 630 in the VMware ESX 3 Server STIG checklist

← Previous · V-4255If the system boots from removable media, it must be stored in a safe or similarly secured container.Next · V-4268 →The system must not have special privilege accounts, such as shutdown and halt.