STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX must employ strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions.

DISA Rule

SV-215213r508663_rule

Vulnerability Number

V-215213

Group Title

SRG-OS-000125-GPOS-00065

Rule Version

AIX7-00-001102

Severity

CAT I

CCI(s)

• CCI-000877 - The organization employs strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions.

Weight

10

Fix Recommendation

Disable telnet by executing the following command:
# stopsrc -t telnet

Check Contents

From the command prompt, execute the following to check if "telnetd" is enabled.
# lssrc -t telnet | grep active

If the above command returns output, this is a finding.

Vulnerability Number

V-215213

Documentable

False

Rule Version

AIX7-00-001102

Severity Override Guidance

From the command prompt, execute the following to check if "telnetd" is enabled.
# lssrc -t telnet | grep active

If the above command returns output, this is a finding.

Check Content Reference

M

Target Key

4012

Comments