cyberstrikeus 2.1.9 Ensure FTP Server is not installed (Automated)
Description
The File Transfer Protocol (FTP) provides networked computers with the ability to transfer files.
Rationale
FTP does not protect the confidentiality of data or authentication credentials. It is recommended SFTP be used if file transfer is required. Unless there is a need to run the system as a FTP server (for example, to allow anonymous downloads), it is recommended that the package be deleted to reduce the potential attack surface.
Audit Procedure
Command Line
Run the following command to verify vsftpd is not installed:
dpkg -s vsftpd | grep -E '(Status:|not installed)'
Expected Result
dpkg-query: package 'vsftpd' is not installed and no information is available
Remediation
Command Line
Run the following command to remove vsftpd:
apt purge vsftpd
Default Value
vsftpd is not installed on minimal server installations. Additional FTP servers also exist and should be audited.
References
- CIS Controls v7 - 9.2 Ensure Only Approved Ports, Protocols and Services Are Running
Profile
- Level 1 - Server
- Level 1 - Workstation