2.1.6 Ensure tftp server is not enabled (Scored) [SecScan]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== 2.1.6 Ensure tftp server is not enabled (Scored)======
=====Profile Applicability=====  
<code>
Level 1 - Server 
Level 1 - Workstation
</code>

=====Description=====
Trivial File Transfer Protocol (TFTP) is a simple file transfer protocol, typically used to automatically transfer configuration or boot machines from a boot server. The packages ''tftp'' and ''atftp'' are both used to define and support a TFTP server.

=====Rationale=====
TFTP does not support authentication nor does it ensure the confidentiality or integrity of data. It is recommended that TFTP be removed, unless there is a specific need for TFTP. In that case, extreme caution must be used when configuring the services.

=====Audit===== 
Run the following command and verify tftp is off or missing:
<Code:bash>
# chkconfig --list 
xinetd based services: 
  tftp: off
</Code>

=====Remediation===== 
Run the following command to disable tftp:
<Code:bash>
# chkconfig tftp off
</Code>