Re: [Full-Disclosure] OpenSSL Vulnerabilities

Previous message: Raju Mathur: "[Full-Disclosure] OpenSSL Vulnerabilities"
In reply to: Raju Mathur: "[Full-Disclosure] OpenSSL Vulnerabilities"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

pbat_private

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --On Friday, August 02, 2002 09:39:12 AM +0530 Raju Mathur
<raju@linux-delhi.org> wrote:

>     Tina> Does anyone know if Netscape, Opera, Internet Explorer or
>     Tina> any of the other browsers are vulnerable to these issues?
> 
>     Tina> Thanks in advance -- Tina Bird
> 
> Here's how I do it [line may wrap]:
> 
> for i in /bin/* /usr/bin/* /sbin/* /usr/sbin/* /usr/X11R6/bin/*
> /usr/local/bin/* ; do if ldd $i | egrep 'libssl' > /dev/null ; then
> echo $i ; fi ; done
> 
> You could change the list of directories you want to search, or use
> the output of a find in the for command.  I don't think libcrypto
> has issues; if it does, make the argument to egrep
> 'libcrypto|libssl'.

And 

# lsof  | egrep 'libcrypto|libssl'

or shorter

# lsof  | egrep 'libcrypto|libssl' | awk '{ print$1 }' | sort | uniq

gives an overview, which current running processes must be restarted
afer updating the libraries (and calling ldconfig).

        Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE9Sieke1eqe5WPQi0RAoN+AKC/ubi3GGYla4a2M8dM0YSuEodTNQCg1UOp
SiVRHrDerHZOdGgRHXWlK4o=
=QhAY
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Full-Disclosureat_private
http://lists.netsys.com/mailman/listinfo/full-disclosure