cyberstrikeus 5.2 Ensure chargen is not enabled (Scored)
Profile Applicability
- Level 1
Description
chargen is a network service that responds with 0 to 512 ASCII characters for each connection it receives. This service is intended for debugging and testing purposes. It is recommended that this service be disabled.
Rationale
Disabling this service will reduce the remote attack surface of the system.
Audit Procedure
Using Command Line
Ensure the chargen services are not enabled:
grep ^chargen /etc/inetd.conf
Expected Result
No results should be returned.
Remediation
Using Command Line
Remove or comment out any chargen lines in /etc/inetd.conf:
sed -i 's/^chargen/#chargen/' /etc/inetd.conf
Default Value
Not enabled by default on Ubuntu 12.04 LTS Server.
References
- CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
Profile
Level 1 - Scored