Kategori: Remediation Guides
How to Fix an Open Mail Relay (MTA Open Mail Relaying Allowed, Nessus 10262)
An open mail relay is an SMTP server that accepts mail from anyone and forwards it to any outside domain, which lets…
How to Fix Missing Linux Kernel Mitigations for Hardware Vulnerabilities
Missing Linux kernel mitigations for hardware vulnerabilities is a Greenbone/OpenVAS finding that means the running kernel reports one or more CPU flaws…
How to Fix CVE-2023-4911 (Looney Tunables) in glibc
CVE-2023-4911, known as Looney Tunables, is a buffer overflow in the glibc dynamic loader (ld.so) that lets a local user gain root…
Kerberoasting Mitigation: How to Fix Privileged Accounts With SPNs (Nessus 150480, PingCastle P-Kerberoasting)
Kerberoasting mitigation means ensuring no privileged account carries a service principal name (SPN), because any domain user can request its service ticket…
JQuery 1.2 < 3.5.0 Multiple XSS: How to Fix CVE-2020-11022 and CVE-2020-11023
JQuery 1.2 < 3.5.0 Multiple XSS means a web server is serving a jQuery library older than 3.5.0, a version range affected…
IPMI Cipher Suite Zero Authentication Bypass: How to Fix It (and the IPMI v2.0 Password Hash Disclosure)
IPMI cipher suite zero authentication bypass means a server’s management controller (BMC) accepts IPMI 2.0 logins over cipher suite 0, which skips…
How to Fix Web Server HTTP Header Internal IP Disclosure (Nessus 10759) on IIS, Apache and nginx
Web Server HTTP Header Internal IP Disclosure means a web server writes its private (RFC 1918) address into a response header, usually…
How to Fix Host Header Injection (Tenable WAS 98623, Acunetix)
Host header injection means a web server or application trusts the client-supplied HTTP Host header (or X-Forwarded-Host) and uses it to build…
How to Fix Follina (CVE-2022-30190): Nessus 161691 MSDT Workaround Detection
CVE-2022-30190, known as Follina, is a remote code execution flaw in the Microsoft Support Diagnostic Tool (MSDT) that is triggered through the…
How to Fix ProxyShell on Exchange Server (CVE-2021-34473)
ProxyShell is a chain of three Microsoft Exchange Server flaws (CVE-2021-34473, CVE-2021-34523 and CVE-2021-31207) that lets an unauthenticated attacker run code on…