[Xitami] Study: Paucity of patches on OpenSSL
Bowden, Zeb
xitami@lists.xitami.org
Tue, 4 Nov 2003 09:24:02 -0500
This is a multi-part message in MIME format.
------_=_NextPart_001_01C3A2DF.4B7AF212
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Has anyone been able to prove one way or another if Xitami is
susceptible to the OpenSSL vulnerabilities? I'm pretty sure it is, but
have no proof...
Has anyone noticed any unexplained crashes related to ssl/xitami pro?
Only 3 percent of Web servers running the open-source version of a
secure communications component, OpenSSL, may be using the latest,
bug-free software, according to a recent survey by
<http://rss.com.com/redir?destUrl=3Dhttp%3A%2F%2Fnews.netcraft.com%2F&sit=
e
Id=3D3&oId=3D2110-1002-5101555&ontId=3D1009&lop=3Dnl_ex>Internet
watcher NetCraft. The
<http://rss.com.com/2100-1002-5085327.html?tag=3Dnl>OpenSSL secure =
sockets
layer software allows servers to securely communicate with browsers
across the Internet.
http://rss.com.com/2110-1002_3-5101555.html?part=3Drss&tag=3Dfeed&subj=3D=
news&
foo=3DStudy:%20Paucity%20of%20patches%20on%20OpenSSL%2011--04
Zeb Bowden
VT.SETI.IAD.MIG:Application Developer
zbowden@vt.edu
------_=_NextPart_001_01C3A2DF.4B7AF212
Content-Type: text/html;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.0.6249.1">
<TITLE>Study: Paucity of patches on OpenSSL</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=3D2 FACE=3D"Courier New">Has anyone been able to prove one =
way or another if Xitami is susceptible to the OpenSSL vulnerabilities? =
I'm pretty sure it is, but have no proof…</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Courier New">Has anyone noticed any =
unexplained crashes related to ssl/xitami pro?</FONT>
</P>
<BR>
<P><FONT SIZE=3D2 FACE=3D"Courier New">Only 3 percent of Web servers =
running the open-source version of a secure communications component, =
OpenSSL, may be using the latest, bug-free software, according to a =
recent survey by <</FONT><A =
HREF=3D"http://rss.com.com/redir?destUrl=3Dhttp%3A%2F%2Fnews.netcraft.com=
%2F&siteId=3D3&oId=3D2110-1002-5101555&ontId=3D1009&lop=3D=
nl_ex"><U><FONT COLOR=3D"#0000FF" SIZE=3D2 FACE=3D"Courier =
New">http://rss.com.com/redir?destUrl=3Dhttp%3A%2F%2Fnews.netcraft.com%2F=
&siteId=3D3&oId=3D2110-1002-5101555&ontId=3D1009&lop=3Dnl=
_ex</FONT></U></A><FONT SIZE=3D2 FACE=3D"Courier =
New">>Internet</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Courier New">watcher NetCraft. The</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New"><</FONT><A =
HREF=3D"http://rss.com.com/2100-1002-5085327.html?tag=3Dnl"><U><FONT =
COLOR=3D"#0000FF" SIZE=3D2 FACE=3D"Courier =
New">http://rss.com.com/2100-1002-5085327.html?tag=3Dnl</FONT></U></A><FO=
NT SIZE=3D2 FACE=3D"Courier New">>OpenSSL secure sockets layer =
software allows servers to securely communicate with browsers across the =
Internet.</FONT></P>
<P><A =
HREF=3D"http://rss.com.com/2110-1002_3-5101555.html?part=3Drss&tag=3D=
feed&subj=3Dnews&foo=3DStudy:%20Paucity%20of%20patches%20on%20Ope=
nSSL%2011--04"><U><FONT COLOR=3D"#0000FF" SIZE=3D2 FACE=3D"Courier =
New">http://rss.com.com/2110-1002_3-5101555.html?part=3Drss&tag=3Dfee=
d&subj=3Dnews&foo=3DStudy:%20Paucity%20of%20patches%20on%20OpenSS=
L%2011--04</FONT></U></A></P>
<BR>
<BR>
<BR>
<BR>
<P><FONT SIZE=3D2 FACE=3D"Courier New">Zeb Bowden</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">VT.SETI.IAD.MIG:Application =
Developer</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">zbowden@vt.edu</FONT>
</P>
<BR>
</BODY>
</HTML>
------_=_NextPart_001_01C3A2DF.4B7AF212--