0093-vsftpd-uninstalled - vsftpd installed¶

Rule ID¶

• 0093-vsftpd-uninstalled

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• FTP (File Transfer Protocol) is a traditional and widely used standard tool for transferring files between a server and a client over a network, especially when authentication is not required (allowing anonymous users to connect to the server).

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• FTP does not protect the confidentiality of data or authentication credentials. If file transfer is required, SFTP is recommended. Unless the system must run as an FTP server (e.g., to allow anonymous downloads), it is recommended to remove the package to reduce the potential attack surface.

Note: There are other FTP servers; if they are not needed, they should also be removed.

Risk Items¶

• Increased risk of attack

Audit Method¶

• Run the following command to verify that the corresponding component is not installed:

  # rpm -q vsftpd
  package vsftpd is not installed
  

Remediation¶

• Run the following command to remove the corresponding package:

  # yum remove vsftpd
  

Impact¶

• If you are using this server as an FTP server, applications that rely on the FTP service may lose data storage.

Default Value¶

• None

References¶

• None

CIS Controls¶

• Version 7
  9.2 Ensure Only Approved Ports, Protocols, and Services Are Running
  Ensure that only network ports, protocols, and services listening on a system with validated business needs are running on each system.