STIGQter: STIG Summary: Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Mar 2021:

The Ubuntu operating system must not have the telnet package installed.

DISA Rule

SV-238326r654153_rule

Vulnerability Number

V-238326

Group Title

SRG-OS-000074-GPOS-00042

Rule Version

UBTU-20-010405

Severity

CAT I

CCI(s)

• CCI-000197 - The information system, for password-based authentication, transmits only cryptographically-protected passwords.

Weight

10

Fix Recommendation

Remove the telnet package from the Ubuntu operating system by running the following command:

$ sudo apt-get remove telnetd

Check Contents

Verify that the telnet package is not installed on the Ubuntu operating system by running the following command:

$ dpkg -l | grep telnetd

If the package is installed, this is a finding.

Vulnerability Number

V-238326

Documentable

False

Rule Version

UBTU-20-010405

Severity Override Guidance

Verify that the telnet package is not installed on the Ubuntu operating system by running the following command:

$ dpkg -l | grep telnetd

If the package is installed, this is a finding.

Check Content Reference

M

Target Key

5318

Comments