0
votes
1answer
57 views

PCI compliance and SSL certificates on a CentOS VPS

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is ...
0
votes
2answers
434 views

How to determine SSL Cipher strength

I have updated my ssl.conf file on my Apache2 configuration to use the following SSLCipherSuite SSLProtocol all -SSLv2 SSLCipherSuite HIGH:MEDIUM:!ADH However the PCI scan seems to detect that WEAK ...
2
votes
1answer
712 views

Are CVE-2010-4478 and CVE-2011-0539 fixed in OpenSSH 5.3?

I'm running OpenSSH 5.3p1-81.el6_3, which according to my server is the latest stable version. My PCI scan is showing CVE-2010-4478 and CVE-2011-0539 exploits as being present due to my OpenSSH ...
4
votes
2answers
3k views

How to Disable SSLv2 for Apache httpd

I just tested my site on https://www.ssllabs.com/ and it said SSLv2 is insecure and I should disable that along with weak Cipher Suites. How can I disable that? I tried the following but it isn’t ...
0
votes
1answer
278 views

PCI Compliance Apache Shiro fail

On a CentOS LAMP box, a PCI compliance scan is failing on: Apache Shiro URI Path Security Traversal Information Disclosure http/80 As far as I can tell the server doesn't have Shiro installed, ...
0
votes
1answer
590 views

PCI Compliance SSL Certificate Cannot Be Trusted fail

The server is a CentOS box with the default LAMP stack running. A PCI scan lists this as a fail: SSL Certificate Cannot Be Trusted https (443/tcp) Severity: Medium Notes: none We don't actually ...
2
votes
4answers
2k views

Updating OpenSSH to latest stable version via yum

I am running CentOS 5.7 and need to upgrade OpenSSH to the latest stable version (PCI compliance issues). However, the most recent version available via the CentOS yum repository is 4.3p2. How can I ...
1
vote
1answer
2k views

Filter incoming traffic to UDP port for pci compliance

It had been recommended for PCI compliance that I filter incoming traffic to UDP port 5353 please can someone advise what are the steps to do this? I am currently using Centos 5.7 64 bit.
3
votes
3answers
832 views

CentOS PCI Compliance assessment

We are currently working our way through a PCI compliance assessment on our server running CentOS. We are getting a lot of 'severe' issues with suggested fixes. The suggestions to rectify the issues ...
4
votes
3answers
1k views

Trustwave PCI Complaince scan fails for fully patched CentOS 5.5

I have a fully patched CentOS 5.5 server that is failing the Trustwave PCI compliance scan. The items it is complaining about is openssl < 0.9.8.o. rpm -q openssl shows: openssl-0.9.8e-12.el5_5.7 ...
2
votes
5answers
752 views

Failed PCI Compliance - The remote SMTP server is vulnerable to a buffer overflow

Hey guys, I have tried allowing the scanners IP to be accepted through IPTABLES into the SMTP port, but the scan still fails. This is the error: The remote SMTP server is vulnerable to a buffer ...