STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX telnet daemon must not be running.

DISA Rule

SV-215258r508663_rule

Vulnerability Number

V-215258

Group Title

SRG-OS-000074-GPOS-00042

Rule Version

AIX7-00-002059

Severity

CAT I

CCI(s)

• CCI-000197 - The information system, for password-based authentication, transmits only cryptographically-protected passwords.

Weight

10

Fix Recommendation

Disable the "telnet" entry in "/etc/inetd.conf" using command:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'telnet' -p 'tcp6'

Reload the inetd process:
# refresh -s inetd

Check Contents

Determine if the "telnet" daemon is running by running the following command:
# grep -v '^#' /etc/inetd.conf | grep telnet

If an entry is returned, this is a finding.

Vulnerability Number

V-215258

Documentable

False

Rule Version

AIX7-00-002059

Severity Override Guidance

Determine if the "telnet" daemon is running by running the following command:
# grep -v '^#' /etc/inetd.conf | grep telnet

If an entry is returned, this is a finding.

Check Content Reference

M

Target Key

4012

Comments