CCE-50367-2Platform: cpe:/o:apple:mac_os_14 | Date: (C)2024-04-23 (M)2024-04-23 |
The system must not have the Unix-to-Unix Copy Protocol (UUCP) service active. UUCP, a set of programs that enable the sending of files between different Unix systems as well as sending commands to be executed on another system, is not essential and must be disabled in order to prevent the unauthorized connection of devices, transfer of information, and tunneling.
Note:UUCP service is disabled at startup by default macOS.
Audit:
Verify the macOS system is configured to disable Unix-to-Unix copy protocol service with the following command:
/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.apple.uucp" => disabled'
If the result is not "1", this is a finding.
Remediation:
Configure the macOS system to disable Unix-to-Unix copy protocol service with the following command:
/bin/launchctl disable system/com.apple.uucp
NOTE:The system may need to be restarted for the update to take effect.
Parameter:
[Yes/No]
Technical Mechanism:
Configure the macOS system to disable Unix-to-Unix copy protocol service with the following command:
/bin/launchctl disable system/com.apple.uucp
CCSS Severity: | CCSS Metrics: |
CCSS Score : 8.1 | Attack Vector: NETWORK |
Exploit Score: 2.2 | Attack Complexity: HIGH |
Impact Score: 5.9 | Privileges Required: NONE |
Severity: HIGH | User Interaction: NONE |
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:99364 |