{"id":14276,"date":"2025-08-18T11:49:23","date_gmt":"2025-08-18T08:19:23","guid":{"rendered":"https:\/\/maralhost.com\/kb\/articles\/whm-cpanel\/%d8%aa%d8%b7%d8%a7%d8%a8%d9%82-pci-%d9%88-%d9%86%d8%b3%d8%ae%d9%87%d9%87%d8%a7%db%8c-%d9%86%d8%b1%d9%85%d8%a7%d9%81%d8%b2%d8%a7%d8%b1%db%8c\/"},"modified":"2025-08-18T12:09:13","modified_gmt":"2025-08-18T08:39:13","slug":"pci-whm","status":"publish","type":"docs","link":"https:\/\/maralhost.com\/kb\/docs\/whm-cpanel\/pci-whm\/","title":{"rendered":"\u062a\u0637\u0627\u0628\u0642 PCI \u0648 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc"},"content":{"rendered":"\n

\u062a\u0639\u0627\u0631\u06cc\u0641 \u06a9\u0644\u06cc\u062f\u06cc \u0645\u0642\u0627\u0644\u0647<\/strong><\/h2>\n\n\n\n
    \n
  1. PCI Compliance (\u062a\u0637\u0627\u0628\u0642 \u0628\u0627 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f PCI)<\/strong>
    \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0628\u0631\u0627\u06cc \u062d\u0641\u0627\u0638\u062a \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u062a\u200c\u0647\u0627\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0648 \u0633\u0631\u0648\u0631\u0647\u0627. \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 PCI-compliant \u0647\u0633\u062a\u0646\u062f\u060c \u0628\u0647 \u0637\u0648\u0631 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u0627\u0632 \u0627\u0646\u062a\u0642\u0627\u0644 \u0627\u0645\u0646 \u062f\u0627\u062f\u0647 \u0648 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0645\u062d\u0627\u0641\u0638\u062a \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.<\/li>\n\n\n\n
  2. Backporting (\u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u06cc \u0628\u0647 \u0646\u0633\u062e\u0647 \u0642\u0628\u0644\u06cc)<\/strong>
    \u0641\u0631\u0622\u06cc\u0646\u062f\u06cc \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0641\u0642\u0637 \u0642\u0633\u0645\u062a\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u0645\u06cc\u200c\u06a9\u0646\u062f \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u0646\u0633\u062e\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0641\u0632\u0627\u06cc\u0634 \u06cc\u0627\u0628\u062f. \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0628\u0627\u0639\u062b \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0636\u0627\u0641\u0647 \u0634\u062f\u0646 \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0648 \u062a\u0633\u062a \u0646\u0634\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n\n\n\n
  3. OpenSSL<\/strong>
    \u06cc\u06a9 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0627\u0645\u0646 SSL \u0648 TLS \u06a9\u0647 \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u0648 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n\n\n\n
  4. SSLCipherSuite<\/strong>
    \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u062f\u0631 Apache \u0628\u0631\u0627\u06cc \u062a\u0639\u0631\u06cc\u0641 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a SSL\/TLS.<\/li>\n\n\n\n
  5. OpenSSH<\/strong>
    \u0628\u0633\u062a\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0645\u0646 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 SSH\u060c \u0634\u0627\u0645\u0644 SSH daemon \u0648 \u06a9\u0644\u0627\u06cc\u0646\u062a\u200c\u0647\u0627.<\/li>\n\n\n\n
  6. Exim<\/strong>
    \u06cc\u06a9 Mail Transfer Agent (MTA) \u06a9\u0647 \u062a\u0648\u0633\u0637 cPanel \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u06cc\u0645\u06cc\u0644 \u0633\u0631\u0648\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n\n\n\n
  7. SMTP (Simple Mail Transfer Protocol)<\/strong>
    \u067e\u0631\u0648\u062a\u06a9\u0644 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u0627\u0631\u0633\u0627\u0644 \u0627\u06cc\u0645\u06cc\u0644 \u06a9\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc (SSL\/TLS) \u0628\u0631\u0627\u06cc PCI Compliance \u062f\u0627\u0631\u062f.<\/li>\n\n\n\n
  8. FTP \/ SFTP \/ SCP \/ WebDisk<\/strong>
    \u067e\u0631\u0648\u062a\u06a9\u0644\u200c\u0647\u0627\u06cc \u0627\u0646\u062a\u0642\u0627\u0644 \u0641\u0627\u06cc\u0644\u061b FTP \u0646\u0627\u0627\u0645\u0646 \u0627\u0633\u062a \u0648 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0627\u0632 SFTP \u06cc\u0627 SCP \u06cc\u0627 WebDisk \u0628\u0631\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.<\/li>\n\n\n\n
  9. TLS (Transport Layer Security)<\/strong>
    \u067e\u0631\u0648\u062a\u06a9\u0644 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u06cc \u06a9\u0647 \u0646\u0633\u062e\u0647 1.2 \u0648 \u0628\u0627\u0644\u0627\u062a\u0631 \u0628\u0631\u0627\u06cc PCI Compliance \u0627\u0644\u0632\u0627\u0645\u06cc \u0627\u0633\u062a.<\/li>\n\n\n\n
  10. BIND<\/strong>
    \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 DNS server \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0628\u0647 \u0631\u0648\u0632 \u0634\u062f\u0647 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633 \u0622\u0646 (\u0646\u0633\u062e\u0647 \u0648 hostname) \u0645\u062e\u0641\u06cc \u0634\u0648\u062f \u062a\u0627 PCI compliant \u0628\u0627\u0634\u062f.<\/li>\n\n\n\n
  11. Mailman<\/strong>
    \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0644\u06cc\u0633\u062a \u0627\u06cc\u0645\u06cc\u0644\u061b \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0631\u0639\u0627\u06cc\u062a PCI Compliance \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0634\u0648\u062f \u06cc\u0627 \u0645\u062d\u062f\u0648\u062f \u06af\u0631\u062f\u062f.<\/li>\n\n\n\n
  12. Insecure Cookie (\u06a9\u0648\u06a9\u06cc \u0646\u0627\u0627\u0645\u0646)<\/strong>
    \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0641\u0627\u0642\u062f \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc HttpOnly \u0648 Secure \u0647\u0633\u062a\u0646\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a session \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u0646\u062f.<\/li>\n\n\n\n
  13. RPC Portmapper<\/strong>
    \u0633\u0631\u0648\u06cc\u0633 \u062a\u0628\u062f\u06cc\u0644 \u0634\u0645\u0627\u0631\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 RPC \u0628\u0647 \u067e\u0648\u0631\u062a TCP\/IP\u061b \u0628\u0627\u06cc\u062f \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0634\u0648\u062f \u062a\u0627 PCI compliant \u0628\u0627\u0634\u062f.<\/li>\n<\/ol>\n\n\n\n

    \u0645\u0631\u0648\u0631 \u06a9\u0644\u06cc<\/h3>\n\n\n\n

    \u0627\u06a9\u062b\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u0633\u06a9\u0646 PCI \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c \u0646\u0633\u062e\u0647 \u062e\u0627\u0635\u06cc \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u06a9\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0622\u0646 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u0633\u0646\u062f \u0628\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0628\u0647 \u0634\u0645\u0627 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0627\u0632 \u0641\u0631\u0622\u06cc\u0646\u062f Backporting<\/strong> \u0628\u0631\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    \u0645\u0647\u0645:<\/strong>
    \u0633\u06cc\u0633\u062a\u0645 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0647\u0646\u06af\u0627\u0645 \u0645\u0646\u0642\u0636\u06cc \u0634\u062f\u0646 \u06cc\u06a9 \u06a9\u0648\u06a9\u06cc \u0642\u0628\u0644\u06cc\u060c \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0646\u0627\u0627\u0645\u0646 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0646\u0627\u0645\u0639\u062a\u0628\u0631 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u0627\u0632 \u0627\u06cc\u062c\u0627\u062f \u062d\u0644\u0642\u0647\u200c\u0647\u0627\u06cc \u0631\u06cc\u062f\u0627\u06cc\u0631\u06a9\u062a \u062f\u0631 \u0648\u0631\u0648\u062f \u0628\u0647 cPanel & WHM \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0633\u06cc\u0633\u062a\u0645 PCI \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0627\u06cc\u0646 \u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0628\u0627\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u0634\u06a9\u0644 \u06af\u0632\u0627\u0631\u0634 \u062f\u0647\u062f\u060c \u0632\u06cc\u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0628\u0647 \u0627\u062a\u0635\u0627\u0644 \u0627\u0645\u0646 SSL \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n

    \n

    \u062a\u0648\u062c\u0647: \u0628\u0631\u062e\u06cc \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc Ubuntu \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.<\/p>\n<\/blockquote>\n\n\n\n

    \n\n\n\n

    Backporting \u0686\u06cc\u0633\u062a\u061f<\/strong><\/h3>\n\n\n\n

    \u0641\u0631\u0622\u06cc\u0646\u062f Backport \u0628\u0647 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0641\u0642\u0637 \u0642\u0633\u0645\u062a\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u062f \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u0646\u0633\u062e\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0641\u0632\u0627\u06cc\u0634 \u06cc\u0627\u0628\u062f. \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u0647 \u0641\u0642\u0637 \u06cc\u06a9 \u0641\u0644\u06af (flag) \u0628\u0647 \u0628\u0633\u062a\u0647 \u0627\u0636\u0627\u0641\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n

    \u0645\u062b\u0627\u0644:
    OpenSSL \u0646\u0633\u062e\u0647 0.9.7c \u0628\u0627 \u067e\u0686 OpenSSL 0.9.7d \u062a\u0631\u06a9\u06cc\u0628 \u0634\u062f\u0647 \u0648 \u0628\u0647 OpenSSL 0.9.7c-2 \u062a\u0628\u062f\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06a9\u062b\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u0633\u06a9\u0646 PCI \u0646\u0633\u062e\u0647 0.9.7d \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0631\u0627 \u062c\u0633\u062a\u062c\u0648 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a OpenSSL 0.9.7c-2 \u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0628\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0646\u0634\u0627\u0646 \u062f\u0647\u0646\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a\u060c \u0628\u0627\u06cc\u062f \u0628\u0647 \u0634\u0631\u06a9\u062a PCI \u0627\u0637\u0644\u0627\u0639 \u062f\u0647\u06cc\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0628\u0627 Backport \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n
    \n\n\n\n

    OpenSSL<\/strong><\/h3>\n\n\n\n

    \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0648\u0636\u0639\u06cc\u062a Backport \u062f\u0631 OpenSSL:<\/p>\n\n\n\n

      \n
    1. \u062a\u0639\u06cc\u06cc\u0646 \u0646\u0633\u062e\u0647 OpenSSL \u0646\u0635\u0628\u200c\u0634\u062f\u0647:<\/li>\n<\/ol>\n\n\n\n
      rpm -qa | grep openssl\n<\/code><\/pre>\n\n\n\n
      \u0645\u062b\u0627\u0644 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n
      openssl-0.9.8e-36.el5_11\n<\/code><\/pre>\n\n\n\n
        \n
      1. \u0628\u0631\u0631\u0633\u06cc Change Log \u0628\u0631\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627:<\/li>\n<\/ol>\n\n\n\n
        rpm --changelog -q openssl-0.9.8b-10.el5 | less\n<\/code><\/pre>\n\n\n\n
        \u0627\u06af\u0631 CVE\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 PCI \u062f\u0631 \u0627\u06cc\u0646 \u0644\u06cc\u0633\u062a \u0647\u0633\u062a\u0646\u062f\u060c \u0628\u0647 \u0634\u0631\u06a9\u062a PCI \u0627\u0637\u0644\u0627\u0639 \u062f\u0647\u06cc\u062f \u062a\u0627 \u0627\u06cc\u0646 \u0627\u0633\u06a9\u0646 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 False Positive<\/strong> \u062b\u0628\u062a \u0634\u0648\u062f.<\/p>\n\n\n\n
        \n\n\n\n
        SSLCipherSuite<\/strong><\/h3>\n\n\n\n
          \n
        • \u0645\u0633\u06cc\u0631: WHM \u00bb Home \u00bb Service Configuration \u00bb Apache Configuration<\/li>\n\n\n\n
        • \u0645\u0642\u062f\u0627\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0631\u0627\u06cc \u062a\u0637\u0627\u0628\u0642 \u0628\u0627 PCI \u0627\u0633\u062a.<\/li>\n\n\n\n
        • \u0628\u0631\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631\u060c \u0627\u0632 Mozilla SSL Configuration Generator<\/strong> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n
        • \u0627\u06af\u0631 \u067e\u0633 \u0627\u0632 \u062a\u063a\u06cc\u06cc\u0631 \u0627\u0633\u06a9\u0646 PCI \u067e\u0627\u0633 \u0646\u0634\u062f\u060c \u0645\u0642\u062f\u0627\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0631\u0627 \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u06cc\u062f.<\/li>\n<\/ul>\n\n\n
          \n
          \"\"<\/figure>\n<\/div>\n\n\n
          \n\n\n\n
          OpenSSH<\/strong><\/h3>\n\n\n\n
            \n
          • \u0628\u0631\u0631\u0633\u06cc \u0646\u0633\u062e\u0647 \u0646\u0635\u0628\u200c\u0634\u062f\u0647:<\/li>\n<\/ul>\n\n\n\n
            rpm -qa | grep openssh\n<\/code><\/pre>\n\n\n\n
            \u0645\u062b\u0627\u0644 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n
            openssh-5.3p1-94.el6.i686\n<\/code><\/pre>\n\n\n\n
              \n
            • \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c:\n
                \n
              1. OpenSSH J-PAKE Session Key Retrieval<\/strong> \u2014 \u062a\u0623\u062b\u06cc\u0631 \u0631\u0648\u06cc RHEL 6 \u0648 7 \u0646\u062f\u0627\u0631\u062f (CVE-2010-4478)<\/li>\n\n\n\n
              2. OpenSSH “child_set_env()” Security Bypass<\/strong> \u2014 \u062a\u0623\u062b\u06cc\u0631 \u062d\u062f\u0627\u0642\u0644\u06cc \u062f\u0627\u0631\u062f \u0648 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc RHEL \u0627\u0635\u0644\u0627\u062d \u0646\u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
              3. \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f\u062a\u0631 (\u0645\u062b\u0644\u0627\u064b 6.6.1p1-35.el7_3)\u060c \u0628\u0631\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0645\u0634\u06a9\u0644 \u062a\u0623\u06cc\u06cc\u062f \u0647\u0648\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647\u060c SELinux<\/strong> \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f.<\/li>\n<\/ul>\n\n\n
                \n
                \"\"<\/figure>\n<\/div>\n\n\n
                \n\n\n\n
                SSH daemon<\/strong><\/h3>\n\n\n\n
                  \n
                • \u0628\u0631\u0627\u06cc \u062a\u0637\u0627\u0628\u0642 PCI\u060c SSHD \u0628\u0627\u06cc\u062f \u0627\u0632 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645\u200c\u0647\u0627\u06cc \u0647\u0634\u06cc\u0646\u06af \u0642\u0648\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/li>\n\n\n\n
                • \u0645\u0631\u0627\u062d\u0644:<\/li>\n<\/ul>\n\n\n\n
                    \n
                  1. \u0648\u0631\u0648\u062f \u0628\u0647 \u0633\u0631\u0648\u0631 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 root<\/li>\n\n\n\n
                  2. \u0648\u06cc\u0631\u0627\u06cc\u0634 \/etc\/ssh\/sshd_config<\/code> \u0648 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646:<\/li>\n<\/ol>\n\n\n\n
                    KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256\nCiphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr\nMACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com\n<\/code><\/pre>\n\n\n\n
                      \n
                    1. \u0631\u06cc\u0633\u062a SSH:<\/li>\n<\/ol>\n\n\n\n
                      \/usr\/local\/cpanel\/scripts\/restartsrv_sshd\n<\/code><\/pre>\n\n\n\n
                      \n\n\n\n
                      Exim<\/strong><\/h3>\n\n\n\n
                        \n
                      • cPanel & WHM \u0634\u0627\u0645\u0644 \u067e\u0686\u200c\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc PCI-compliance \u0627\u0633\u062a.<\/li>\n\n\n\n
                      • SMTP Encryption<\/strong>:\n
                          \n
                        1. WHM \u00bb Service Configuration \u00bb Exim Configuration Manager
                          \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 Require clients to connect with SSL \/ STARTTLS<\/li>\n\n\n\n
                        2. Mailserver Configuration \u00bb Allow Plaintext Authentication = No<\/li>\n<\/ol>\n<\/li>\n\n\n\n
                        3. \u0645\u0634\u0627\u0647\u062f\u0647 CVE\u0647\u0627\u06cc Backport \u0634\u062f\u0647:<\/li>\n<\/ul>\n\n\n\n
                          rpm -q --changelog cpanel-exim | grep CVE\n<\/code><\/pre>\n\n\n\n
                          \n\n\n\n
                          FTP<\/strong><\/h3>\n\n\n\n
                            \n
                          • \u062a\u0648\u0635\u06cc\u0647: \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 FTP \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 SFTP \/ SCP \/ WebDisk<\/li>\n\n\n\n
                          • \u0627\u06af\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c TLS Cipher Suite \u0627\u0645\u0646 \u0628\u0631\u0627\u06cc ProFTPD:<\/li>\n<\/ul>\n\n\n\n
                            TLSCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:...\n<\/code><\/pre>\n\n\n\n
                            \n\n\n\n
                            TLS<\/strong><\/h3>\n\n\n\n
                              \n
                            • \u0646\u0633\u062e\u0647 TLS \u0628\u0627\u06cc\u062f 1.2 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0628\u0627\u0634\u062f.<\/li>\n<\/ul>\n\n\n
                              \n
                              \"\"<\/figure>\n<\/div>\n\n\n
                              \n\n\n\n
                              BIND<\/strong><\/h3>\n\n\n\n
                                \n
                              • \u0628\u0647 \u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc BIND \u0627\u0632 \u0637\u0631\u06cc\u0642 Vendor \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n\n\n\n
                              • \u0628\u0631\u0627\u06cc CVE\u0647\u0627\u060c \u062e\u0631\u0648\u062c\u06cc:<\/li>\n<\/ul>\n\n\n\n
                                rpm -q --changelog bind | grep 754398\n<\/code><\/pre>\n\n\n\n
                                  \n
                                • \u0645\u062e\u0641\u06cc \u06a9\u0631\u062f\u0646 \u0646\u0633\u062e\u0647:<\/li>\n<\/ul>\n\n\n\n
                                  version \"\";\n<\/code><\/pre>\n\n\n\n
                                    \n
                                  • \u0645\u062e\u0641\u06cc \u06a9\u0631\u062f\u0646 hostname:<\/li>\n<\/ul>\n\n\n\n
                                    hostname \"\";\n<\/code><\/pre>\n\n\n\n
                                      \n
                                    • \u0631\u06cc\u0633\u062a BIND:<\/li>\n<\/ul>\n\n\n\n
                                      \/usr\/local\/cpanel\/scripts\/restartsrv_named\n<\/code><\/pre>\n\n\n\n
                                      \n\n\n\n
                                      Mailman<\/strong><\/h3>\n\n\n\n
                                        \n
                                      • \u0628\u0631\u0627\u06cc \u0627\u0633\u06a9\u0646 PCI \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 Mailman \u0631\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f:
                                        WHM \u00bb Server Configuration \u00bb Tweak Settings \u00bb Enable Mailman = Off<\/li>\n\n\n\n
                                      • \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc\u060c \u0641\u0627\u06cc\u0644 .htaccess<\/code> \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0648\u0628 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0627\u06cc\u062c\u0627\u062f \u0634\u0648\u062f.<\/li>\n<\/ul>\n\n\n
                                        \n
                                        \"\"<\/figure>\n<\/div>\n\n\n
                                        \n\n\n\n
                                        \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0646\u0627\u0627\u0645\u0646<\/strong><\/h3>\n\n\n\n
                                          \n
                                        • \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0646\u0627\u0627\u0645\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a session \u0631\u0627 \u0644\u0648 \u0628\u062f\u0647\u0646\u062f \u06cc\u0627 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 XSS\/Man-in-the-Middle \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u0646\u062f.<\/li>\n\n\n\n
                                        • \u0631\u0641\u0639 \u0645\u0634\u06a9\u0644:
                                          WHM \u00bb Apache Configuration \u00bb Include Editor \u00bb Pre VirtualHost Include<\/li>\n<\/ul>\n\n\n\n
                                          <IfModule mod_headers.c>\nHeader always set Strict-Transport-Security \"max-age=300; includeSubDomains; preload\"\nHeader always edit Set-Cookie (.*) \"$1;HttpOnly;Secure\"\nHeader always set X-Frame-Options \"sameorigin\"\nHeader setifempty Referrer-Policy: same-origin\nHeader set X-XSS-Protection \"1; mode=block\"\nHeader set X-Permitted-Cross-Domain-Policies \"none\"\nHeader set Referrer-Policy \"no-referrer\"\nHeader set X-Content-Type-Options: nosniff\n<\/IfModule>\n<\/code><\/pre>\n\n\n\n
                                          \n\n\n\n
                                          RPC Portmapper<\/strong><\/h3>\n\n\n\n
                                            \n
                                          • \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0634\u0645\u0627\u0631\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 RPC \u0631\u0627 \u0628\u0647 \u067e\u0648\u0631\u062a TCP\/IP \u062a\u0628\u062f\u06cc\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/li>\n\n\n\n
                                          • \u0628\u0631\u0627\u06cc PCI compliant\u060c \u0628\u0627\u06cc\u062f \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0634\u0648\u062f:<\/li>\n<\/ul>\n\n\n\n
                                            systemctl stop rpcbind\nsystemctl stop rpcbind.socket\nsystemctl disable rpcbind\n<\/code><\/pre>\n\n\n\n
                                            \n
                                            \u0646\u06a9\u062a\u0647: \u062d\u0630\u0641 \u0628\u0633\u062a\u0647 rpcbind \u062a\u0648\u0635\u06cc\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f \u0686\u0648\u0646 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0648\u0627\u0628\u0633\u062a\u06af\u06cc\u200c\u0647\u0627 (\u0645\u062b\u0644 quota) \u0622\u0633\u06cc\u0628 \u0628\u0628\u06cc\u0646\u0646\u062f.<\/p>\n<\/blockquote>\n\n\n\n
                                            \u06a9\u06cc\u0627\u0646 \u067e\u0648\u0631<\/p>\n","protected":false},"excerpt":{"rendered":"
                                            \u062a\u0639\u0627\u0631\u06cc\u0641 \u06a9\u0644\u06cc\u062f\u06cc \u0645\u0642\u0627\u0644\u0647 \u0645\u0631\u0648\u0631 \u06a9\u0644\u06cc \u0627\u06a9\u062b\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u0633\u06a9\u0646 PCI \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c \u0646\u0633\u062e\u0647 \u062e\u0627\u0635\u06cc \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u06a9\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0622\u0646 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u0633\u0646\u062f \u0628\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0628\u0647 \u0634\u0645\u0627 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0627\u0632 \u0641\u0631\u0622\u06cc\u0646\u062f Backporting \u0628\u0631\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 […]<\/p>\n","protected":false},"author":3,"featured_media":14280,"parent":13241,"menu_order":64,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-14276","docs","type-docs","status-publish","has-post-thumbnail","hentry"],"acf":[],"author_avatar":"https:\/\/maralhost.com\/kb\/wp-content\/litespeed\/avatar\/c59fc140fa83b542ed78a005738a60da.jpg?ver=1778441380","author_name":"Shayan Kianpoor","_links":{"self":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/14276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/comments?post=14276"}],"version-history":[{"count":2,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/14276\/revisions"}],"predecessor-version":[{"id":14285,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/14276\/revisions\/14285"}],"up":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/13241"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/media\/14280"}],"wp:attachment":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/media?parent=14276"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/doc_tag?post=14276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}