I am web hosting websites on Apache/2.2.22 and did a security scan.  The scan said the server software is outdated; the web hosting provider says its not outdated and is stable.  Someone uploaded malware to non-www directories.Could the malware have happened due to the outdated Apache/2.2.22 software?This is a shared hosting environment.
Hosting on Apache/2.2.22, scan says outdated
linux;apache httpd;malware
Could the malware have happened due to the outdated Apache/2.2.22 software?Possibly. There are a number of vulnerabilities against version 2.2.22 which are listed here:http://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-66/version_id-142323/Apache-Http-Server-2.2.22.htmlAs well as here on Apache's website:http://httpd.apache.org/security/vulnerabilities_22.htmlBut it's much more likely that some software which runs on top of Apache was the point of entry.Outdated?I would definitely call 2.2.22 outdated. It even shows as much on the Apache download page.    