{"id":38873,"date":"2014-04-25T09:52:58","date_gmt":"2014-04-25T09:52:58","guid":{"rendered":"http:\/\/blog.open-e.com\/?p=38873"},"modified":"2025-07-07T10:49:13","modified_gmt":"2025-07-07T10:49:13","slug":"is-your-heartbleeding","status":"publish","type":"post","link":"https:\/\/www.open-e.com\/blog\/is-your-heartbleeding\/","title":{"rendered":"Is your Heartbleeding?"},"content":{"rendered":"

The Heartbleed bug, officially referenced as CVE-2014-0160, is already being coined as one of the biggest security threats since the mass adoption of the Internet – affecting millions of websites and services, including credit-card numbers, email accounts and a wide range of online commerce.<\/p>\n

Heartbleed is a security bug in the OpenSSL cryptography library, which is widely used to secure Internet sites and applications. The OpenSSL “Heartbleed” vulnerability allows hackers to steal information protected by the SSL\/TLS encryption (it provides communication privacy and security on the Internet when it comes to email, web, IM or virtual private networks).<\/div>\n

Shortly speaking, Heartbleed shares the memory of a system protected by OpenSSL to anyone on the Internet.<\/p>\n

\n

Dr Seggelmann, of M\u00fcnster in Germany, said the bug which introduced the flaw was “unfortunately” missed by him and a reviewer when it was introduced into the open source OpenSSL encryption protocol over two years ago.<\/p>\n

Source: The Sydney Morning Herald<\/a><\/strong><\/div>\n<\/div>\n

Who reported it?<\/b><\/p>\n

According to OpenSSL<\/a>, it was Neel Mehta from Google’s security team that reported the problem in the beginning of April. What’s really scary is that the bug slipped under the radar for so long.<\/p>\n

 <\/p>\n

Am I affected by Heartbleed?<\/b><\/p>\n

To check if your website or application is vulnerable you can use Metasploit’s Brand New Heartbleed Scanner Module<\/a>.<\/p>\n

If you would like to check Open-E DSS V7, here’s an example of how to install Metasploit Framework on Ubuntu<\/a>.<\/p>\n

 <\/p>\n

Is Open-E software safe?<\/b><\/p>\n

Our team of developers tested the products with Metasploit’s Brand New Heartbleed Scanner Module and guarantee that all Open-E Data Storage Software<\/a> products are secure. There is no need to update software or change passwords.<\/p>\n

 <\/p>\n

\"\"<\/a>

CC Image courtesy of xkcd.com<\/p><\/div>\n

 <\/p>\n

Read more about the OpenSSL “Heartbleed” Vulnerbility:<\/strong><\/p>\n

https:\/\/heartbleed.com\/<\/a><\/p>\n

https:\/\/en.wikipedia.org\/wiki\/Heartbleed<\/a>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"

The Heartbleed bug, officially referenced as CVE-2014-0160, is already being coined as one of the biggest security threats since the mass adoption of the Internet – affecting millions of websites …<\/p>\n","protected":false},"author":11,"featured_media":55884,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[29],"tags":[75,229,310,329,396,590,631],"class_list":["post-38873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection","tag-attack","tag-dss-v7","tag-heartbleed","tag-https","tag-memory-leak","tag-security","tag-ssl"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t