Security vulnerabilities remediation

Free and open source softwares

#### Apache

Test the information available available when there is a 404 http error and in HTTP headers:

curl --head

On Debian-based OS, in /etc/apache2/apache2.conf:

ServerTokens Prod
ServerSignature Off 

sudo systemctl restart apache2

curl --head


Versions impacted: All versions of Samba from 3.5.0 onwards

Workaround :

Add the parameter:

nt pipe support = no 

to the [global] section of your smb.conf
restart **smbd**

Samba SMB signing disabled


testparm  -v |grep -i smb

Back to top