PCI Scan Fail : Apache 2.2.3 - Plesk V 9.3.0

[psingh]

Dear Friends,

Did any once come across this before.. I am having PCI Compliance problem with my server :

Current : Apache 2.2.3 - Plesk V 9.3.0
suggested : Apache 2.2.16 or higher..


However, i don't see any update available in Plesk Control panel..

Did anyone come across this problem, to become PCI Compliance.

How do i go ahead with this upgrade... any help is appreciated..

Thank you,
PS

 

[arctic_ged]

My server failed on this too, how did you resolve it?

 

[atomicturtle]

False positive.

https://access.redhat.com/security/updates/backporting/?sc_cid=3093

 

[arctic_ged]

I got around this issue by hiding the version number of the Apache the server is running by editing /etc/httpd/conf/httpd.conf configuration file using these commands:

ServerSignature Off
ServerTokens Prod

I now have another issue with openssh version, I have the most up to date but pci compliance thinks its vulnerable...
Is it possible to hide openSSH version number from pci compliance scan?