STIGQter STIGQter: STIG Summary: VMware ESX 3 Server Version: 1 Release: 2 Benchmark Date: 22 Jul 2016: The SMTP service HELP command must not be enabled.

DISA Rule

SV-12507r2_rule

Vulnerability Number

V-12006

Group Title

GEN004540

Rule Version

GEN004540

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

To disable the SMTP HELP command, remove or empty the Sendmail help file:
/etc/mail/helpfile.

Check Contents

Check if Help is disabled in Sendmail.

Procedure:
# telnet <host> 25
> help

If the help command returns any Sendmail version information, this is a finding.

Vulnerability Number

V-12006

Documentable

False

Rule Version

GEN004540

Severity Override Guidance

Check if Help is disabled in Sendmail.

Procedure:
# telnet <host> 25
> help

If the help command returns any Sendmail version information, this is a finding.

Check Content Reference

M

Responsibility

System Administrator

Target Key

1386

Comments