I'm new to PCI, we just paid for the Trustkeeper PCI Scan and here are some of the results (just the vulnerability names):
- DB Accesibility
- SSLv2 Supported
- A lot of BIND (patches) related vulnerabilities
- A lot of OpenSSL (patches) related vulnerabilities
- A lot of Apache Tomcat (patches) related vulnerabilities
- HTTP Server Username Probing
We are paying for a VPS service and my questions are: which vulnerabilities can/should/must be fixed by us (how could we fix them???) and which ones by the hosting provider ?
Thanks in advance!