Windows Vista Security Technical Implementation Guide

The Windows Vista Security Technical Implementation Guide (V6 R42) has 251 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

251STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R42

CurrentPublished Fri Apr 28 2017

Installed FTP server is configured to allow access to the system drive.

Windows Vista Security Technical Implementation Guide

Assessment Title

Rule Text

Installed FTP server is configured to allow access to the system drive.

Description

Discussion Text

This is a Category 1 finding because the FTP service allows remote users to access shared files and directories which could provide access to system resources and compromise the system, especially if the user can gain access to the root directory of the boot drive.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-1121

Rule

SV-29496r1_rule

Severity

high

Rule Version

5.005

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

In the "Command Prompt" window, enter the following command, log on using an authenticated FTP account, and attempt to access the root of the boot drive:

X:\>ftp 127.0.0.1
(Connected to ftru065103.ncr.disa.mil.
220 ftru065103 Microsoft FTP Service (Version 2.0).)

User: ftpuser
(331 Password required for ftpuser.)

Password: password
(230 User ftpuser logged in.)

ftp> dir /

If the FTP session indicates access to operating system files like "PAGEFILE.SYS" or "NTLDR," then this is a finding.

Implementation Procedure

Fix Text

Configure the system to prevent an FTP Service from allowing access to the system drive.

STIG check 29 of 251 in the Windows Vista STIG checklist

← Previous · V-1120Installed FTP server is configured to allow prohibited logins.Next · V-1122 →The system configuration is not set with a password-protected screen saver.