Apache Vulnerabilities

[mtz_federico]

I checked my ip address on shodan.io and it told me that I had 3 Apache vulnerabilities.

My server runs Ubuntu 18.10 on a VM (its not always running so im not very worried but I should still fix it) I attached a photo that showed what shodan showed me, I don’t know how to fix them.

Could anybody help?

thanks in advance

[Mikensan]

Those are all old (last one being February 2019), have you simply tried updating Apache? You can also google the CVE and find recommendations on stop-gap solutions usually, but I would simply update apache...

 

sudo apt-get update

[mtz_federico]

2 hours ago, Mikensan said:

Those are all old (last one being February 2019), have you simply tried updating Apache? You can also google the CVE and find recommendations on stop-gap solutions usually, but I would simply update apache...

 

sudo apt-get update

I just updated Apache and plex just in case it is plex, now I just need shodan to rescan my ip

[Acedia]

sudo apt-get update
sudo apt-get upgrade

 

[Mikensan]

19 hours ago, mtz_federico said:

I just updated Apache and plex just in case it is plex, now I just need shodan to rescan my ip

Totally forgot to say && sudo apt-get upgrade - Also plex listens on 3200 32400 natively so you would need to tell shodan to scan that port or it won't be able to test plex.

[2FA]

1 hour ago, Mikensan said:

Totally forgot to say && sudo apt-get upgrade - Also plex listens on 3200 natively so you would need to tell shodan to scan that port or it won't be able to test plex.

It's port 32400, if that was a mistype.

[Mikensan]

25 minutes ago, 2FA said:

It's port 32400, if that was a mistype.

This isn't my week lol, but yes 32400.

[mtz_federico]

11 hours ago, Mikensan said:

Totally forgot to say && sudo apt-get upgrade - Also plex listens on 3200 32400 natively so you would need to tell shodan to scan that port or it won't be able to test plex.

Shodan shows that im running plex on 32400 but i don't know if plex has an apache backend (I doubt it since apache is bad at file hosting) and shodan doesn’t specify on which port the vulnerability is on

[Mikensan]

12 hours ago, mtz_federico said:

Shodan shows that im running plex on 32400 but i don't know if plex has an apache backend (I doubt it since apache is bad at file hosting) and shodan doesn’t specify on which port the vulnerability is on

Easy solution there is to stop the plex server/service and let shodan run again.