Profile Applicability:
 • Level 1

Description:
 The Telnet client provides unencrypted remote terminal access. Removing the Telnet client reduces security risks associated with transmitting sensitive information in clear text.

Rationale:
 Removing Telnet clients helps prevent interception of credentials and data, encouraging the use of secure alternatives like SSH.

Impact:
 Pros:

  • Enhances communication security by removing insecure protocols.

  • Reduces potential attack vectors.

Cons:

  • May disrupt legacy workflows relying on Telnet.

Default Value:
 Telnet client may be installed by default on some systems.

Pre-requisites:

  • Root or sudo privileges to uninstall packages.

Remediation:

Test Plan:

Using Linux command line:

1. Check if Telnet client is installed:

RPM-based systems

rpm -q telnet

Debian-based systems:

dpkg -l | grep telnet

2. Confirm presence of Telnet client package.

Implementation Plan:

Using Linux command line:

1. Remove Telnet client package if installed:

RPM-based:

yum remove telnet -y

Debian-based:

apt remove telnet -y

2. Verify removal:

rpm -q telnet  # or dpkg -l | grep telnet

Backout Plan:

Using Linux command line:

1. Reinstall Telnet client if needed:

RPM-based:

yum install telnet -y

Debian-based:

apt install telnet -y

2. Confirm successful installation.

References: