STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX must disable trivial file transfer protocol.

DISA Rule

SV-215334r508663_rule

Vulnerability Number

V-215334

Group Title

SRG-OS-000365-GPOS-00152

Rule Version

AIX7-00-003022

Severity

CAT I

CCI(s)

CCI-001814 - The Information system supports auditing of the enforcement actions.

Weight

Fix Recommendation

In "/etc/inetd.conf", comment out the "tftp" entry:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'tftp' -p 'udp'

Restart inetd:
# refresh -s inetd

Check Contents

From the command prompt, execute the following command:
# grep "^tftp[[:blank:]]" /etc/inetd.conf

If there is any output from the command, it is a finding.

Vulnerability Number

V-215334

Documentable

False

Rule Version

AIX7-00-003022

Severity Override Guidance

From the command prompt, execute the following command:
# grep "^tftp[[:blank:]]" /etc/inetd.conf

If there is any output from the command, it is a finding.

Check Content Reference

Target Key

4012

AIX must disable trivial file transfer protocol.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments