Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug

10 Apr 2014   #1
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 
Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug

Quote:
The password-leaking OpenSSL bug dubbed Heartbleed is so bad, switching off the internet for a while sounds like a good plan.

A tiny flaw in the widely used encryption library allows anyone to trivially and secretly dip into vulnerable systems, from your bank's HTTPS server to your private VPN, to steal passwords, login cookies, private crypto-keys and much more.

How, in 2014, is this possible?

A simple script for the exploit engine Metasploit can, in a matter of seconds, extract sensitive in-memory data from systems that rely on OpenSSL 1.0.1 to 1.0.1f for TLS encryption. The bug affects about 500,000, or 17.5 per cent, of trusted HTTPS websites, we're told, as well as client software, email servers, chat services, and anything else using the aforementioned versions of OpenSSL.
Source

A Guy


My System SpecsSystem Spec
.

Reply

 Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug




Thread Tools





Similar help and support threads
Thread Forum
Anatomy of a Sniper... SE III
Work in progress, I am on the first pass on Marksman (normal?) and this is what I can remember so far. Things I like: Nice quality graphics Nice texture and weapons ergos Easy on the rig as far as requirements go Control as very good, efective, easily bound and plenty of options Awesome...
Gaming
Still reeling from Heartbleed, OpenSSL suffers from crypto bypass flaw
Source A Guy
Security News
Heartbleed Prompts Joint Vendor Effort to Boost OpenSSL, Security
Source A Guy
Security News
Is OpenSSL available for windows7 64bit? (for total commander)
Hi, So my problem is that i cant find OpenSSL for windows7 x64. I need it for total commander, to use ftp, it requires OpenSSL. My total commander is 64bit, as well as my windows, but i cant find if OpenSSL is available, and if it is how to install it. Any ideas?
Software
The classpnp.sys horror...help.
Hi all, I need a heads-up. As recently as the other day, I switch the pc off normally, expecting the same as usual, blah blah, but the next day, on booting up, the system just hangs at the "Starting Windows" screen for no reason. Using safe mode don't work, hangs on the aforementioned file. I...
General Discussion
Disk has 0 bytes used and 0 bytes free
hey Guys, I had a very healthy version of XP media center formatted with NTFS FS. I had my D drive as the OS drive and my C drive was my storage drive...dont ask how it got there but it was a series of me playing around with Disk mirroring and drive swapping. Anyway when I upgraded to...
Installation & Setup

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 18:20.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App