Anatomy of OpenSSL's Heartbleed

the article said:

Security penetration testers are going to find themselves in work “through 2020” with this bug, Williams said, and noted that it's going to be hard to identify vulnerabilities in some environments. For example, he said, it's going to be hard to tell if Windows client programs were compiled against vulnerable OpenSSL versions.

And that's not to mention all the "non-port-443" software that might be compiled to vulnerable versions of OpenSSL - e-mail servers, databases, LDAP services, and so on.

Click to expand...

Marc said:

Since I never saw a need for SSL, Elsmar isn't affected. For those of you who wonder what it is, this is a good read: Anatomy of OpenSSL's Heartbleed

You might also be interested in PCs, phones and more under threat

BTW - It isn't a "virus", worm" or even a program. SSL (Secure Socket Layer) is a library, and the "bug" has been known for more than 2 years.

Click to expand...