STIGQter: STIG Summary: Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Ubuntu operating system must not have the telnet package installed.

DISA Rule

SV-219177r610963_rule

Vulnerability Number

V-219177

Group Title

SRG-OS-000074-GPOS-00042

Rule Version

UBTU-18-010105

Severity

CAT I

CCI(s)

• CCI-000197 - The information system, for password-based authentication, transmits only cryptographically-protected passwords.

Weight

10

Fix Recommendation

Remove the telnet package from the Ubuntu operating system by running the following command:

# sudo apt-get remove telnetd

Check Contents

Verify that the telnet package is not installed on the Ubuntu operating system.

Check that the telnet daemon is not installed on the Ubuntu operating system by running the following command:

# dpkg -l | grep telnetd

If the package is installed, this is a finding.

Vulnerability Number

V-219177

Documentable

False

Rule Version

UBTU-18-010105

Severity Override Guidance

Verify that the telnet package is not installed on the Ubuntu operating system.

Check that the telnet daemon is not installed on the Ubuntu operating system by running the following command:

# dpkg -l | grep telnetd

If the package is installed, this is a finding.

Check Content Reference

M

Target Key

4055

Comments