full-disclosure - OpenSSL Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <15690.1512.444836.383536@mail.linux-delhi.org>
From: raju at linux-delhi.org (Raju Mathur)
Subject: OpenSSL Vulnerabilities

>>>>> "Tina" == Tina Bird <tbird@...cision-guesswork.com> writes:

    Tina> The vendors listed in the CERT advisory on the OpenSSL
    Tina> vulnerabilities are all producing server-side software:

    Tina> http://www.cert.org/advisories/CA-2002-23.html

    Tina> Does anyone know if Netscape, Opera, Internet Explorer or
    Tina> any of the other browsers are vulnerable to these issues?

    Tina> Thanks in advance -- Tina Bird

Here's how I do it [line may wrap]:

for i in /bin/* /usr/bin/* /sbin/* /usr/sbin/* /usr/X11R6/bin/* /usr/local/bin/* ; do if ldd $i | egrep 'libssl' > /dev/null ; then echo $i ; fi ; done

You could change the list of directories you want to search, or use
the output of a find in the for command.  I don't think libcrypto has
issues; if it does, make the argument to egrep
'libcrypto|libssl'.

Regards,

-- Raju
-- 
Raju Mathur          raju@...dalaya.org           http://kandalaya.org/
                     It is the mind that moves