如下图一次扫描,中度风险39个,这个是必须要处理的.其中mysql占了36个,一看这个感觉整个人都不好了.但是最后解决的办法也很简单,就是升级.
系统版本Redhat 7.3
1.telnet
因为要升级openssh,openssl,为了避免意外,首先要开启telnet服务,并把所有相关的包上传到服务器.
1.1确认是否安装了telnet和xinetd(默认是没有安装)
rpm -qa telnet*rpm-qa xinetd
#按情况安装如下依赖包
yum -y install gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5-devel libidn libidn-devel openssl openssl-devel nss_ldap openldap openldap-devel openldap-clients openldap-servers libxslt-devel libevent-devel ntp libtool-ltdl bison libtool vim-enhanced patch
1.2关闭telnet自启动
systemctl disable xinetd
systemctl disable telnet.socket
1.3启动telnet
1)启动xinetd就会开启telnet服务
service xinetd start
2)检查telnet监听是否正常
yum -y install net-tools
netstat-tunlp|grep 23
3)设置服务自启动
#首先检查是否自启动
systemctl list-unit-files | grep enable |grep xin
#没有的话加入自启动
systemctl enable xinetd
systemctl enable telnet.socket
1.4检查防火墙,是否开始23端口
1)检查防火墙是否开启
firewall-c