OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mikko Lipasti (mikko.lipasti_at_polarcomconsulting.fi)
Date: Thu Sep 19 2002 - 15:22:45 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    The CERT's CA-2002-23 references CAN-2002-0656, CAN-2002-0657,
    CAN-2002-0655 and CAN-2002-0659. MDKSA-2002:046-1 references the first
    three but not CAN-2002-0659, does this mean that we are still vulnerable
    to CAN-2002-0659 (remote dos attack) or has someone been sloppy?

    On Thu, 2002-09-19 at 23:12, Vincent Danen wrote:
    >
    > On Thursday, September 19, 2002, at 01:46 PM, Scott Taylor wrote:
    >
    > > I just checked out the Mandrake Advisories and I don't see anything
    > > there about OpenSSL. What gives?
    > > http://www.cert.org/advisories/CA-2002-23.html
    > >
    > > I'm only interested in 7.2 updates.
    >
    > You're either checking the wrong place or you're not checking hard
    > enough.
    >
    > The openssl packages that fix this have been available for the last 6
    > weeks or so.
    >
    > MDKSA-2002:046-1
    >
    > --
    > MandrakeSoft Security; http://www.mandrakesecure.net/
    > "lynx - source http://linsec.ca/vdanen.asc | gpg --import"
    > {FE6F2AFD: 88D8 0D23 8D4B 3407 5BD7 66F9 2043 D0E5 FE6F 2AFD}
    > 

    -- 
Mikko Lipasti
Polarcom Consulting Oy
:: mikko.lipastipolarcomconsulting.fi
:: +358 (0)40 5590 988

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org

    iD8DBQA9ijIV94gaZNejrIERAn61AKCmouKF/Ig2QmJgMII8cw5cMoJ3ygCfQ5yh SqDHJIladRcIEVhgNS6fVHE= =hULV -----END PGP SIGNATURE-----