Detections
Analytics
GEN009240 - The system must not have Internet Message Access Protocol (IMAP) service active.
Information
The IMAP service should not be running unless the system is acting as a mail server for client connections. Running unnecessary services increases the attack vector on the system.Solution
Edit /etc/inetd.conf and comment out the imap2 service line.Restart the inetd service.
# refresh -s inetd
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7, CAT|II, CCI|CCI-001436, Rule-ID|SV-38712r1_rule, STIG-ID|GEN009240, Vuln-ID|V-29508
Plugin: Unix
Control ID: c989b64fc3e731970b9b8f394d293c3ed68b070ece83ee02fae4f93915451d94