SV-62821r1_rule
V-4691
GEN004640
GEN004640
CAT I
10
Disable mail aliases for decode and uudecode. If the /etc/aliases or /usr/lib/aliases (mail alias) file contains entries for these programs, remove them or disable them by placing "#" at the beginning of the line, and then executing the new aliases command. For more information on mail aliases, refer to the man page for aliases. Disabled aliases would be similar to these examples:
# decode: |/usr/bin/uudecode
# uudecode: |/usr/bin/uuencode -d
Check the SMTP service for an active "decode" command.
Procedure:
# telnet localhost 25
decode
If the command does not return a 500 error code of "command unrecognized", this is a finding.
V-4691
False
GEN004640
Check the SMTP service for an active "decode" command.
Procedure:
# telnet localhost 25
decode
If the command does not return a 500 error code of "command unrecognized", this is a finding.
M
System Administrator
2207