Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-29516 | GEN009320 | SV-38720r1_rule | ECSC-1 | Medium |
Description |
---|
The sprayd service is sometimes used for network and nfs troubleshooting. The spray service can be used for both buffer overflow and Denial of Service attacks by saturating the network. The sprayd daemon is an unnecessary service. |
STIG | Date |
---|---|
AIX 5.3 Security Technical Implementation Guide | 2013-11-04 |
Check Text ( None ) |
---|
None |
Fix Text (F-33074r1_fix) |
---|
Edit the /etc/inetd.conf file and comment out the sprayd service line. Restart the inetd service. # refresh -s inetd |