lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <14620000.1028269983@localhost>
From: pb at bieringer.de (Peter Bieringer)
Subject: OpenSSL Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Friday, August 02, 2002 09:39:12 AM +0530 Raju Mathur
<raju@...ux-delhi.org> wrote:

>     Tina> Does anyone know if Netscape, Opera, Internet Explorer or
>     Tina> any of the other browsers are vulnerable to these issues?
> 
>     Tina> Thanks in advance -- Tina Bird
> 
> Here's how I do it [line may wrap]:
> 
> for i in /bin/* /usr/bin/* /sbin/* /usr/sbin/* /usr/X11R6/bin/*
> /usr/local/bin/* ; do if ldd $i | egrep 'libssl' > /dev/null ; then
> echo $i ; fi ; done
> 
> You could change the list of directories you want to search, or use
> the output of a find in the for command.  I don't think libcrypto
> has issues; if it does, make the argument to egrep
> 'libcrypto|libssl'.

And 

# lsof  | egrep 'libcrypto|libssl'

or shorter

# lsof  | egrep 'libcrypto|libssl' | awk '{ print$1 }' | sort | uniq

gives an overview, which current running processes must be restarted
afer updating the libraries (and calling ldconfig).

        Peter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE9Sieke1eqe5WPQi0RAoN+AKC/ubi3GGYla4a2M8dM0YSuEodTNQCg1UOp
SiVRHrDerHZOdGgRHXWlK4o=
=QhAY
-----END PGP SIGNATURE-----


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ