{"id":38873,"date":"2014-04-25T09:52:58","date_gmt":"2014-04-25T09:52:58","guid":{"rendered":"http:\/\/blog.open-e.com\/?p=38873"},"modified":"2025-07-07T10:49:13","modified_gmt":"2025-07-07T10:49:13","slug":"is-your-heartbleeding","status":"publish","type":"post","link":"https:\/\/www.open-e.com\/blog\/is-your-heartbleeding\/","title":{"rendered":"Is your Heartbleeding?"},"content":{"rendered":"

The Heartbleed bug, officially referenced as CVE-2014-0160, is already being coined as one of the biggest security threats since the mass adoption of the Internet – affecting millions of websites and services, including credit-card numbers, email accounts and a wide range of online commerce.<\/p>\n

Heartbleed is a security bug in the OpenSSL cryptography library, which is widely used to secure Internet sites and applications. The OpenSSL “Heartbleed” vulnerability allows hackers to steal information protected by the SSL\/TLS encryption (it provides communication privacy and security on the Internet when it comes to email, web, IM or virtual private networks).<\/div>\n

Shortly speaking, Heartbleed shares the memory of a system protected by OpenSSL to anyone on the Internet.<\/p>\n

\n

Dr Seggelmann, of M\u00fcnster in Germany, said the bug which introduced the flaw was “unfortunately” missed by him and a reviewer when it was introduced into the open source OpenSSL encryption protocol over two years ago.<\/p>\n

Source: The Sydney Morning Herald<\/a><\/strong><\/div>\n<\/div>\n

Who reported it?<\/b><\/p>\n

According to OpenSSL<\/a>, it was Neel Mehta from Google’s security team that reported the problem in the beginning of April. What’s really scary is that the bug slipped under the radar for so long.<\/p>\n

 <\/p>\n

Am I affected by Heartbleed?<\/b><\/p>\n

To check if your website or application is vulnerable you can use Metasploit’s Brand New Heartbleed Scanner Module<\/a>.<\/p>\n

If you would like to check Open-E DSS V7, here’s an example of how to install Metasploit Framework on Ubuntu<\/a>.<\/p>\n

 <\/p>\n

Is Open-E software safe?<\/b><\/p>\n

Our team of developers tested the products with Metasploit’s Brand New Heartbleed Scanner Module and guarantee that all Open-E Data Storage Software<\/a> products are secure. There is no need to update software or change passwords.<\/p>\n

 <\/p>\n

\"\"<\/a>

CC Image courtesy of xkcd.com<\/p><\/div>\n

 <\/p>\n

Read more about the OpenSSL “Heartbleed” Vulnerbility:<\/strong><\/p>\n

https:\/\/heartbleed.com\/<\/a><\/p>\n

https:\/\/en.wikipedia.org\/wiki\/Heartbleed<\/a>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"

The Heartbleed bug, officially referenced as CVE-2014-0160, is already being coined as one of the biggest security threats since the mass adoption of the Internet – affecting millions of websites …<\/p>\n","protected":false},"author":11,"featured_media":55884,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[29],"tags":[75,229,310,329,396,590,631],"class_list":["post-38873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection","tag-attack","tag-dss-v7","tag-heartbleed","tag-https","tag-memory-leak","tag-security","tag-ssl"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/posts\/38873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/comments?post=38873"}],"version-history":[{"count":1,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/posts\/38873\/revisions"}],"predecessor-version":[{"id":55238,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/posts\/38873\/revisions\/55238"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/media\/55884"}],"wp:attachment":[{"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/media?parent=38873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/categories?post=38873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.open-e.com\/blog\/wp-json\/wp\/v2\/tags?post=38873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}