V-215346

Discussion

The rsh daemon permits username and passwords to be passed over the network in clear text.

Check Content

From the command prompt, run the following command:
# grep -v "^#" /etc/inetd.conf |grep rshd 

The above command may show the daemon is enabled like this:
shell   stream  tcp6    nowait  root    /usr/sbin/rshd  rshd 

If the above grep command returned a line that contains "rshd", this is a finding.