[Full-Disclosure] OpenSSL Vulnerabilities

From: Raju Mathur (raju@linux-delhi.org)
Date: Thu Aug 01 2002 - 21:09:12 PDT

  • Next message: Peter Bieringer: "Re: [Full-Disclosure] OpenSSL Vulnerabilities" 

    >>>>> "Tina" == Tina Bird <tbird@precision-guesswork.com> writes:

    Tina> The vendors listed in the CERT advisory on the OpenSSL
    Tina> vulnerabilities are all producing server-side software:

    Tina> http://www.cert.org/advisories/CA-2002-23.html

    Tina> Does anyone know if Netscape, Opera, Internet Explorer or
    Tina> any of the other browsers are vulnerable to these issues?

    Tina> Thanks in advance -- Tina Bird

Here's how I do it [line may wrap]:

for i in /bin/* /usr/bin/* /sbin/* /usr/sbin/* /usr/X11R6/bin/* /usr/local/bin/* ; do if ldd $i | egrep 'libssl' > /dev/null ; then echo $i ; fi ; done

You could change the list of directories you want to search, or use
the output of a find in the for command.  I don't think libcrypto has
issues; if it does, make the argument to egrep
'libcrypto|libssl'.

Regards,

-- Raju
-- 
Raju Mathur          rajuat_private           http://kandalaya.org/
                     It is the mind that moves
_______________________________________________
Full-Disclosure - We believe in it.
Full-Disclosureat_private
http://lists.netsys.com/mailman/listinfo/full-disclosure

    This archive was generated by hypermail 2b30 : Thu Aug 01 2002 - 21:51:34 PDT