How to disable openssl

[sarm]

Hello,

My rh 7.3 system was hacked via openssl. After doing a little research at packetstorm website I found the hack to be OpenFu**V2.0

Packetstorm says it is an Apache + openssl exploit that produces buffer overflow to gain root access.

I do not have any need for ssl currently.

Is there a way to disable openssl without affecting Apache.

Thanks

 

[blizz]

Comment the following line in "httpd.conf":
Listen 443

With:
#Listen 443

that should disable the ssl port but i can't gaurantee it will protect your machine totally. check with redhat or openssl for updates that you may have missed. They may have an update that fixes this exploit.

Blizz

http://www.thelinuxforums.com