The telnet daemon must not be running.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24386	GEN003850	SV-35134r1_rule	DCPP-1	High

Description
The telnet daemon provides a typically unencrypted remote access service which does not provide for the confidentiality and integrity of user passwords or the remote session. If a privileged user were to log on using this service, the privileged user password could be compromised.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2016-12-20

Details

Check Text ( C-34992r1_chk )
Consult vendor documentation to determine the method for determining if the telnet daemon is running. If the system uses inetd, use the following procedure: # cat /etc/inetd.conf \| tr '\011' ' ' \| tr -s ' ' \| sed -e 's/^[ \t]*//' \|grep -v "^#" \| \ cut -f 6,7 -d " " \| grep -c -i telnetd If the above command returns a number greater than 0, the telnet daemon is running. If the telnet daemon is running, this is a finding.

Check Text ( C-34992r1_chk )

Consult vendor documentation to determine the method for determining if the telnet daemon is running. If the system uses inetd, use the following procedure:
# cat /etc/inetd.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' |grep -v "^#" | \
cut -f 6,7 -d " " | grep -c -i telnetd

If the above command returns a number greater than 0, the telnet daemon is running.

If the telnet daemon is running, this is a finding.

Fix Text (F-30286r1_fix)
Consult vendor documentation to determine the procedure to disable the telnet daemon. If the system uses inetd, edit /etc/inetd.conf and comment out the telnetd line. Restart the inetd service via the following command: # inetd -c