Packages to Avoid

---

For security reasons the following should be avoided:

• fingerd
• ftp-server: Avoid encouraging users sending cleartext passwords.
• ftp: Users will try to ftp to remote hosts and log in using clear text passwords. Run dsniff on the local machine as root to see that you can easily capture their passwords!
• ftpd
• netkit-rpc
• nfs-common
• nfs-kernel-server
• nfs-user-server
• portmap
• rsh-client: Users will try to rsh to remote hosts and log in using clear text passwords. Run dsniff on the local machine as root to see that you can easily capture their passwords! The ssh package will install a replacement rsh.
• rsh-server
• rstart
• rstartd
• rusersd
• rwalld
• sendmail
• talkd
• telnet: Users will try to telnet to remote hosts and log in using clear text passwords. Run dsniff on the local machine as root to see that you can easily capture their passwords!
• telnetd

---

---