Details

Ftp servers should not be run on an end user desktop. Dedicated servers or appropriate cloud storage should be used. Open ports make it easier to exploit the computer.

Solution

Ensure that the FTP Server is not running and is not set to start at boot
Stop the ftp Server
sudo -s launchctl unload -w /System/Library/LaunchDaemons/ftp.plist

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/301

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits