Even if old, this is *possibly* all you will run into: http://blog.zenone.org/2009/03/pci-compliance-disable-sslv2-and-weak.html
Windows-focused, but still generally applicable. I think if you just search for some key terms like "apache httpd 2.2.3 pci", you will get some good information... Marco On Thu, Jul 28, 2011 at 11:44 AM, James Harrison <jamesaharriso...@yahoo.co.uk> wrote: > Thanks for the quick reply everyone. > I understand its not the whole OS and all machines and its all in the > implementation and we do have an auditor, however, scans show httpd 2.2.14 > as having vulnerabilities. Will the httpd 2.2.3 supplied by RH throw up all > kinds of vulnerabilities, because of its lower patch level? _______________________________________________ rhelv5-list mailing list rhelv5-list@redhat.com https://www.redhat.com/mailman/listinfo/rhelv5-list