Korean
<< Back
VID 14055
Severity 40
Port 22
Protocol TCP
Class LSC
Detailed Description The host system's /etc/hosts file's permission or owner is unsafe. /etc/hosts is the file for mapping IP address with hostname. if this file is set maliciously, malicious systems can be trusted.

* Platforms Affected:
UNIX, Linux
Recommendation Reset permissions of the file lower than 600 as the following (in case of Solaris /etc/inet/hosts)
chmod 600 /etc/hosts

if the owner of the file is not root, change the owner
chown root /etc/hosts
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)