CCE-90681-8Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Remove Rsh Trust Files
The files '/etc/hosts.equiv' and '~/.rhosts' (in
each user's home directory) list remote hosts and users that are trusted by the
local system when using the rshd daemon.
To remove these files, run the following command to delete them from any
location:
'$ sudo rm /etc/hosts.equiv'
'$ rm ~/.rhosts'
Parameter:
Technical Mechanism:
Trust files are convenient, but when
used in conjunction with the R-services, they can allow
unauthenticated access to a system.
Fix:
find -type f -name .rhosts -exec rm -f '' \;
rm /etc/hosts.equiv
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30372 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31095 |