Http Host head attack

check

curl -H "Host: www.aaa_bbb.com" https://localhost/zabbix/ -k

fix /etc/httpd/conf/httpd.conf

ServerName servername:port
UseCanonicalName On

Disabling OPTIONS

check

curl -i -X OPTIONS localhost

fix , add to /etc/httpd/conf/httpd.conf

RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^OPTIONS
RewriteRule .* - [F]

Disabling SSLV3

fix /etc/httpd/conf/httpd.conf

SSLProtocol all -SSLv2 -SSLv3