[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-91148-7

Platform: cpe:/o:ubuntu:ubuntu_linux:14.04Date: (C)2017-03-14   (M)2023-07-04



Ensure time is not enabled (Scored) time is a network service that responds with the server's current date and time as a 32 bit integer. This service is intended for debugging and testing purposes. It is recommended that this service be disabled.


Parameter:

[exists/does_not_exist]


Technical Mechanism:

Disabling this service will reduce the remote attack surface of the system. Fix: Remove or comment out any time lines in /etc/inetd.conf: #time stream tcp nowait root internal 6 Special Purpose Services This section describes services that are installed on servers that specifically need to run these services. If any of these services are not required, it is recommended that they be disabled or deleted from the system to reduce the potential attack surface. Note: This section lists common packages for different services however there are alternate packages which provide many of these services which should also be disabled or deleted if not required.

CCSS Severity:CCSS Metrics:
CCSS Score : 7.1Attack Vector: NETWORK
Exploit Score: 2.8Attack Complexity: LOW
Impact Score: 4.2Privileges Required: LOW
Severity: HIGHUser Interaction: NONE
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:HScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:33868


OVAL    1
oval:org.secpod.oval:def:33868
XCCDF    1
xccdf_org.secpod_benchmark_general_Ubuntu_14_04

© SecPod Technologies