CVE-2004-0230 flagging on my Apache instances

Question

Looking at https://www.kb.cert.org/vuls/id/415294, there are different fixes for different Cisco, Nortel, Redback and Sun equipment.  How do I identify which devices my EC2 instances are using?

Accepted Answer

Use a Vulnerbility/Patch manager soultion. AWS Offers SSM Patch manager which you can scan and report your patch baselines. https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager.html

You also have AWS Inspector 2 which should also flag https://docs.aws.amazon.com/inspector/latest/user/scanning-ec2.html

CVE-2004-0230 flagging on my Apache instances

Relevanter Inhalt