Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-29504 | GEN009200 | SV-38708r1_rule | ECSC-1 | Medium |
Description |
---|
The daytime service runs as root from the inetd daemon and can provide an opportunity for Denial of Service PING or PING-PONG attacks. The daytime service is unnecessary and it increases the attack vector of the system. |
STIG | Date |
---|---|
AIX 5.3 Security Technical Implementation Guide | 2013-11-04 |
Check Text ( None ) |
---|
None |
Fix Text (F-33062r1_fix) |
---|
Edit /etc/inetd.conf and comment out daytime service lines for both TCP and UDP protocols. Restart the inetd service. # refresh -s inetd |