OpenSSL Security Vulnerability

← Back to Stories (view on slashdot.org)

OpenSSL Security Vulnerability

Posted by michael on Tuesday September 30, 2003 @10:48AM from the what-me-worry dept.

SiliconEntity writes "On the heels of multiple OpenSSH vulnerabilities, the OpenSSL project is now reporting a number of security vulnerabilities of its own. OpenSSL is a standard cryptographic library used in a wide variety of security applications. The new vulnerabilities range from denial-of-service attacks to stack corruption, which imply the possibility of running malicious code. New versions of the software are released today which address the vulnerabilities."

8 of 245 comments (clear)

phew by Anonymous Coward · 2003-09-30 10:49 · Score: 5, Funny

thank goodness i use windows
1. Re:phew by Troll_Kamikaze · 2003-09-30 11:00 · Score: 5, Funny
  
  Hell, Microsoft is even kind enough to send the "Latest Internet Patch" right to my inbox. Sometimes 36 times a day, when necessary!!
  
  Now that's what I call service!
Which means.... by Anonymous Coward · 2003-09-30 10:51 · Score: 2, Funny

we should patch in about a week from now when
the second round of patches come out.
pheeew by Dreadlord · 2003-09-30 10:53 · Score: 3, Funny

fortunately I'm running something secure like telnet, those OpenSSH bugs never scare me...

--
The IT section color scheme sucks.
Re:first post! by soliaus · 2003-09-30 10:59 · Score: 3, Funny

first post!
posted via lynx over openssh! w00t! w00t!
Oh, so that was your box...sorry about that.

--
Speaking at Defcon 12 - Credit Card Networks Revisted: Pen
one of life's little ironies by Bernie · 2003-09-30 11:34 · Score: 3, Funny

If you call your product "open" SSL (or openssh for that matter), and occasionally people will discover it's Exactly What It Says On The Tin.

Well it amused me anyway :)
Re:Feeling kinda good about it by ebay+troll · 2003-09-30 11:45 · Score: 5, Funny

excellent poster!!!!!!! responded in less than 5 minutes, pleasure to work with, quick response

A+++++++++++!
Commit Rights by codepunk · 2003-09-30 12:11 · Score: 1, Funny

Damn did somebody give a MCSD commit priv's to the CVS tree?????

--

Got Code?