The instsrv daemon must be disabled on AIX.

The instsrv service is part of the Network Installation Tools, used for servicing servers running AIX 3.2. This service should be disabled to prevent attacks.

From the command prompt, execute the following command: # grep "^instsrv[[:blank:]]" /etc/inetd.conf

If there is any output from the command, this is a finding.

In "/etc/inetd.conf", comment out the "instsrv" entry by running command: # chsubserver -r inetd -C /etc/inetd.conf -d -v 'instsrv' -p 'tcp'

Restart inetd: # refresh -s inetd