The telnet service must be disabled, as it sends all data, including the user's password in a clear text form that can be easily intercepted and read. The operating system must transmit only cryptographically-protected passwords. Operating systems used for non-local maintenance sessions must implement cryptographic mechanisms to protect the integrity of non-local maintenance and diagnostic communications. Operating systems used for non-local maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of non-local maintenance and diagnostic communications. Passwords need to be protected at all times. The telnet service must be disabled, as it sends all data, including the user's password, in a clear text form that can be easily intercepted and read. The operating system must employ strong authenticators in the establishment of non-local maintenance and diagnostic sessions. It is disabled by default enabling it would increase. The 'rexec' service does not implement crypto and has had several security vulnerabilities in the past.
The operating system must implement DoD-approved encryption to protect the confidentiality of remote access sessions. The Security assessment policy subsystem must be enabled.Īny changes to the hardware, software, and/or firmware components of the information system and/or application can potentially have significant effects on the overall security of the. Findings (MAC III - Administrative Sensitive) Finding ID
0 kommentar(er)
