Detections
Analytics

AIX7-00-002059 - AIX telnet daemon must not be running.

Information

This telnet service is used to service remote user connections. This is historically the most commonly used remote access method for UNIX servers. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the telnetd daemon will be disabled. This function, if required, should be facilitated through SSH.

Solution

Disable the "telnet" entry in "/etc/inetd.conf" using command:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'telnet' -p 'tcp6'

Reload the inetd process:
# refresh -s inetd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(c), CAT|I, CCI|CCI-000197, Rule-ID|SV-215258r987796_rule, STIG-ID|AIX7-00-002059, STIG-Legacy|SV-101403, STIG-Legacy|V-91305, Vuln-ID|V-215258

Plugin: Unix

Control ID: 1213573585e2141c27dbe453c6cd6a6c3c07103f561a9d1232a78c4c956ad7f9