Re: OpenSSL Vulnerabilities

From: Sami Dalouche (skoobiat_private)
Date: Thu Aug 15 2002 - 12:41:59 PDT

  • Next message: MOD: "Input validation attack in php-affiliate-v1.0"

    Hi,
    
    the following list may not be "platform independant", but it may help
    you find out vulnerable software...
    
    samokk@pingoo:~$ apt-cache showpkg openssl
    Package: openssl
    Versions:
    0.9.6e-1(/var/lib/apt/lists/ftp.rediris.es_pub_linux_distributions_debian_di
    sts_testing_main_binary-i386_Packages)(/var/lib/dpkg/status)
    
    Reverse Depends:
      wl-beta,openssl
      wl,openssl
      w3-el-e21,openssl
      w3-el-e20,openssl
      uw-imapd-ssl,openssl
      telnetd-ssl,openssl 0.9.2b
      sympa,openssl 0.9.5a
      sslwrap,openssl
      ssleay,openssl
      sendmail,openssl
      pyca,openssl 0.9.4
      oav-update,openssl 0.9.6c
      libssl0.9.6,openssl 0.9.6-2
      libio-socket-ssl-perl,openssl
      ipopd-ssl,openssl
      ftpd-ssl,openssl 0.9.2b
      ca-certificates,openssl
      apache-ssl,openssl 0.9.6
    Dependencies:
    0.9.6e-1 - libc6 (2 2.2.4-4) libssl0.9.6 (0 (null)) perl (0 (null)) ssleay
    (3 0.9.2b)
    Provides:
    0.9.6e-1 -
    Reverse Provides:
    samokk@pingoo:~$
    
    ;)
    sam
    
    ----- Original Message -----
    From: "Patrick Brauch" <pabat_private>
    To: <bugtraqat_private>
    Sent: Thursday, August 15, 2002 5:49 PM
    Subject: Re: OpenSSL Vulnerabilities
    
    
    Hi,
    
      does anyone have an overview what programs, independent of platform,
    apart from browsers are vulnerable to this thing?
    
      (as a reminder, this is NOT about the certificate-vulnerability.. ;)
    
    
    cheerio,
    --
    Patrick Brauch                          mailto: pabat_private
    c't Magazin für Computertechnik         http://www.heise.de/ct/
    Fon: ++49 511/ 5352 300                 Fax: ++49 511/ 5352 417
    PGP-Key Fingerprint:  8366 03AC D702 F2BB   C617 E6BC 1811 950E
    I have the heart of a small child. It sits on my desk in a jar.
    



    This archive was generated by hypermail 2b30 : Thu Aug 15 2002 - 15:36:56 PDT