criticalservicesverified ✓rollback-safe
Ensure telnet-server package is not installed
pkg-telnet-server-absent · UBUNTU ≥ 22, RHEL ≥ 8 · 2 impls
Description
The telnet-server package provides the telnet daemon which allows remote logins using the insecure telnet protocol. This package must not be installed.
Rationale
Telnet transmits all data including authentication credentials in cleartext. The telnet server must not be installed as it provides an insecure remote access mechanism.
Check → Remediate
Checkpackage_state
- name:
- telnet-server
- state:
- absent
Remediatepackage_absent
- name:
- telnet-server
Framework references
STIG
V-280944 / RHEL-10-200020V-257831 / RHEL-09-215040V-230487V-270647 / UBTU-24-100030V-260483 / UBTU-22-215035
NIST 800-53
CM-7SC-8IA-5
Live verification
rhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#package#telnet#server#attack-surface