Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Heartbleed Bug OpenSSL vulnerabilty
#1
What is Heartbleed Bug ?

Its a serious vulnerability in OpenSSL cryptographic software library .
If any system using vulnerable versions of OpenSSL, anyone can read the memory of the system including encrypted data and private keys.

Infected openssl versions ?.

OpenSSL version 1.0.0 branch -- NOT vulnerable
OpenSSL version 0.9.8 branch -- NOT vulnerable
OpenSSL version 1.0.1 through 1.0.1f (inclusive) -- vulnerable
OpenSSL version 1.0.1g -- NOT vulnerable

Check your OpenSSL version

root@host:~$ openssl version


How to Fix ?

Update your OpenSSL to latest version .
OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug


More info : http://heartbleed.com
Reply
#2
Tnx dude
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)