Detections
Analytics

AIX7-00-003114 - If the AIX host is running an SMTP service, the SMTP greeting must not provide version information.

Information

The version of the SMTP service can be used by attackers to plan an attack based on vulnerabilities present in the specific version.

Solution

Ensure "Sendmail" or its equivalent has been configured to mask the version information. If necessary, change the "O SmtpGreetingMessage" line in the "/etc/sendmail.cf" file from:
O SmtpGreetingMessage=$j Sendmail $v/$Z; $b

to:

O SmtpGreetingMessage= Mail Server Ready ; $b

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-215412r991589_rule, STIG-ID|AIX7-00-003114, STIG-Legacy|SV-101751, STIG-Legacy|V-91653, Vuln-ID|V-215412

Plugin: Unix

Control ID: 89119264bc226c87d4cd4c96246d24f1c8ee423651e3cf9d2b60f2845bdb7bc4