full-disclosure - OpenSSL Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: pb at bieringer.de (Peter Bieringer)
Subject: OpenSSL Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Friday, August 02, 2002 09:39:12 AM +0530 Raju Mathur
<raju@...ux-delhi.org> wrote:

>     Tina> Does anyone know if Netscape, Opera, Internet Explorer or
>     Tina> any of the other browsers are vulnerable to these issues?
> 
>     Tina> Thanks in advance -- Tina Bird
> 
> Here's how I do it [line may wrap]:
> 
> for i in /bin/* /usr/bin/* /sbin/* /usr/sbin/* /usr/X11R6/bin/*
> /usr/local/bin/* ; do if ldd $i | egrep 'libssl' > /dev/null ; then
> echo $i ; fi ; done
> 
> You could change the list of directories you want to search, or use
> the output of a find in the for command.  I don't think libcrypto
> has issues; if it does, make the argument to egrep
> 'libcrypto|libssl'.

And 

# lsof  | egrep 'libcrypto|libssl'

or shorter

# lsof  | egrep 'libcrypto|libssl' | awk '{ print$1 }' | sort | uniq

gives an overview, which current running processes must be restarted
afer updating the libraries (and calling ldconfig).

        Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE9Sieke1eqe5WPQi0RAoN+AKC/ubi3GGYla4a2M8dM0YSuEodTNQCg1UOp
SiVRHrDerHZOdGgRHXWlK4o=
=QhAY
-----END PGP SIGNATURE-----