RE: OpenSSL Vulnerabilities

From: Josh Welch (jwelchat_private)
Date: Fri Aug 02 2002 - 06:45:50 PDT

  • Next message: Matthew Murphy: "[Full-Disclosure] Xitami Connection Flood Server Termination Vulnerability"

    > The vendors listed in the CERT advisory on the OpenSSL vulnerabilities are
    > all producing server-side software:
    >
    > http://www.cert.org/advisories/CA-2002-23.html
    >
    > Does anyone know if Netscape, Opera, Internet Explorer or any of the other
    > browsers are vulnerable to these issues?
    >
    > Thanks in advance -- Tina Bird
    >
    > "Wine is strong, the King is stronger, women are strongest, but TRUTH
    >           conquers all."
    > -----     Inscription in the Rosslyn Chapel (near Edinburgh, Scotland)
    >
    > http://www.shmoo.com/~tbird
    > Log Analysis http://www.counterpane.com/log-analysis.html
    > VPN http://vpn.shmoo.com
    >
    
    This just came up on firewall-wizards as a matter of fact, at least the
    netscape and internet explorer portion. Those two browsers don't use
    OpenSSL, so they shouldn't be affected. I believe links and lynx were
    mentioned as using OpenSSL, so those would be affected. Don't know what
    Opera uses.
    
    Josh
    



    This archive was generated by hypermail 2b30 : Fri Aug 02 2002 - 14:08:29 PDT