AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

The AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE (V1 R14) has 506 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

506STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R14

CurrentPublished Fri Oct 26 2018

The system must not have the PostOffice Protocol (POP3) service active.

AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

Assessment Title

Rule Text

The system must not have the PostOffice Protocol (POP3) service active.

Description

Discussion Text

The POP3 service is only needed if the server is acting as a mail server and clients are using applications that only support POP3. Users' ids and passwords are sent in plain text to the POP3 service. If mail client access is needed, consider using IMAP or SSL enabled POP3.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-29509

Rule

SV-38713r1_rule

Severity

medium

Rule Version

GEN009250

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the '/etc/inetd.conf' file for active POP3 service.

#grep pop3 /etc/inetd.conf | grep -v \#

If the POP3 service is enabled,  this is a finding.

Implementation Procedure

Fix Text

Edit /etc/inetd.conf and comment out POP3 the service line. Restart the inetd service.   
# refresh -s inetd

STIG check 302 of 506 in the AIX 6.1 STIG checklist

← Previous · V-29508The system must not have Internet Message Access Protocol (IMAP) service active.Next · V-29510 →The system must not have the talk or ntalk services active.