Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!nntp.club.cc.cmu.edu!micro-heart-of-gold.mit.edu!bloom-beacon.mit.edu!bloom-beacon.mit.edu!panix!MIX!Blackbird From: billy@MIX.COM Newsgroups: comp.sys.mac.system Subject: Re: BHeartbleed OpenSSL vulnerability Date: Thu, 10 Apr 2014 06:08:45 +0000 (UTC) Organization: PANIX Public Access Internet and UNIX, NYC Lines: 24 Message-ID: References: <534459ac$0$35014$c3e8da3$460562f1@news.astraweb.com> <53448d99$0$1553$c3e8da3$40cdd511@news.astraweb.com> NNTP-Posting-Host: panix5.panix.com X-Trace: reader2.panix.com 1397110125 8460 166.84.1.5 (10 Apr 2014 06:08:45 GMT) X-Complaints-To: abuse@panix.com NNTP-Posting-Date: Thu, 10 Apr 2014 06:08:45 +0000 (UTC) Xref: csiph.com comp.sys.mac.system:58446 Joanna Shuttleworth writes: > and, yes, the client version can leak stuff under some circumstances... http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed | The vulnerability is due to a missing bounds check in the handling of | the Transport Layer Security (TLS) heartbeat extension. An attacker | could exploit this vulnerability by implementing a malicious TLS or | Datagram Transport Layer Security (DTLS) client, if trying to exploit | the vulnerability on an affected server, or a malicious TLS or DTLS | server, if trying to exploit the vulnerability on an affected client. | An exploit could send a specially crafted TLS or DTLS heartbeat packet | to the connected client or server. An exploit could allow the attacker | to disclose a limited portion of memory from a connected client or | server for every heartbeat packet sent. The disclosed portions of | memory could contain sensitive information that may include private | keys and passwords. Billy Y.. -- sub #'9+1 ,r0 ; convert ascii byte add #9.+1 ,r0 ; to an integer bcc 20$ ; not a number