Detections
Analytics
AIX7-00-003071 - The chargen daemon must be disabled on AIX.
Information
This service is used to test the integrity of TCP/IP packets arriving at the destination.This chargen service is a character generator service and is used for testing the integrity of TCP/IP packets arriving at the destination. An attacker may spoof packets between machines running the chargen service and thus provide an opportunity for DoS attacks. Disable this service to prevent attacks unless testing the network.
Solution
In "/etc/inetd.conf", comment out the "chargen" entries by running commands:# chsubserver -r inetd -C /etc/inetd.conf -d -v 'chargen' -p 'tcp'
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'chargen' -p 'udp'
Restart inetd:
# refresh -s inetd
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-215376r958478_rule, STIG-ID|AIX7-00-003071, STIG-Legacy|SV-101479, STIG-Legacy|V-91381, Vuln-ID|V-215376
Plugin: Unix
Control ID: 98a4fb6b34d160976e314d717dd758e320743794571b94187db879f7b9fc1279