http://myhost/fcgi-bin/echo
http://myhost/fcgi-bin/echo2
rm $OHS_HOME/ohs/fcgi-bin/echo
rm $OHS_HOME/ohs/fcgi-bin/echo2
OHS is not vulnerable to this by default.
The requirement is basically to remove (if it exists) "Indexes" from "Options" in httpd.conf
To remove the version number change ServerSignature On to ServerSignature Off in the httpd.conf file e.g.
vi /u01/app/ohs/product/10.1.0/ohs/conf/httpd.conf
/ServerSignature
/On
cwOff
[Esc]
:wq
opmnctl restartproc ias-component=HTTP_Server