Security vulnerabilities remediation

Free and open source softwares

#### Apache

Test the information available available when there is a 404 http error and in HTTP headers:


curl --head yourdomain.com

On Debian-based OS, in /etc/apache2/apache2.conf:


ServerTokens Prod
ServerSignature Off 


sudo systemctl restart apache2

curl --head yourdomain.com

Samba

Versions impacted: All versions of Samba from 3.5.0 onwards

Workaround :

Add the parameter:


nt pipe support = no 

to the [global] section of your smb.conf
restart **smbd**

Samba SMB signing disabled

testparm 


testparm  -v |grep -i smb

Back to top

Index