cyberstrikeus 5.1.1 Ensure NIS is not installed (Scored)
Profile Applicability
- Level 1
Description
The Network Information Service (NIS), formerly known as Yellow Pages, is a client-server directory service protocol used to distribute system configuration files.
Rationale
The NIS service is inherently an insecure system that has been vulnerable to DOS attacks, buffer overflows and has poor authentication for querying NIS maps. NIS generally has been replaced by such protocols as Lightweight Directory Access Protocol (LDAP). It is recommended that the service be removed.
Audit Procedure
Using Command Line
dpkg -s nis
Expected Result
Ensure package status is not-installed or dpkg returns no info is available.
Remediation
Using Command Line
Uninstall the nis package:
apt-get purge nis
Default Value
Not installed by default on Ubuntu 12.04 LTS Server.
References
- CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
Profile
Level 1 - Scored