Detections
Analytics
GEN009240 - The system must not have Internet Message Access Protocol (IMAP) service active.
Information
The IMAP service should not be running unless the system is acting as a mail server for client connections. Running unnecessary services increases the attack vector on the system.Solution
Edit /etc/inetd.conf and comment out the imap2 service line.Restart the inetd service.
# refresh -s inetd
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: ACCESS CONTROL
References: 800-53|AC-17(8), CAT|II, CCI|CCI-001436, Group-ID|V-29508, Rule-ID|SV-38712r1_rule, STIG-ID|GEN009240, Vuln-ID|V-29508
Plugin: Unix
Control ID: 71b007d69116634fb035f0bb6b50b463bdfd7712c69cc047441e215ff189870e