Hi Derek, Thank you, also see below.
https://community.extremenetworks.com/extreme/topics/heartbleed_openssl_vulnerability_in_nms_oneview_or_wireless_controller Netsite 5.0.0.231 SIEM 7.7.2 Patch 1 (Build 614901 (7.2.0.614901)) use libssl.so.1.0.0. NAC Gateway 5.0.0.231 uses libssl.so 0.9.8 So it looks like those versions are not vulnerable. From: [email protected] [mailto:[email protected]] Sent: 10 April 2014 14:59 To: Enterasys Customer Mailing List Subject: Re: [enterasys] OpenSSL Heartbleed Vulnerability Query I'm still running 08.32.01.0035 and can confirm it is not vulnerable. If you have Internet access to the box, you can safely test yours using http://filippo.io/Heartbleed/ To test my systems internally, I used the modified python script linked within the article below: http://www.net-security.org/secworld.php?id=16661 Derek Johnson Data Communications Coordinator Fort Hays State University (785) 628 - 5688 [email protected]<mailto:[email protected]> -----"Mamabolo, Pheko" <[email protected]<mailto:[email protected]>> wrote: ----- To: "Enterasys Customer Mailing List" <[email protected]<mailto:[email protected]>> From: "Mamabolo, Pheko" <[email protected]<mailto:[email protected]>> Date: 04/10/2014 05:34AM Subject: [enterasys] OpenSSL Heartbleed Vulnerability Query Hi Does anyone know if Enterasys WLAN Controller that is running version 08.11.02.0023 could be running OpenSSL from 1.0.1 through 1.0.1f (i.e. inclusive) whether this has the Heartbleed vulnerability? With best regards, Pheko Mamabolo ------------------------------------ Disclaimer and Confidentiality Note This e-mail communication, its attachments, if any, and any rights attaching to it are, unless the context clearly indicates otherwise, the property of Siemens (Pty) Ltd. It is confidential, private and intended for the addressee only. If you are not the intended recipient and receive this communication in error, you are hereby notified that any review, copying, use, discloser or distribution in any manner whatsoever is strictly prohibited. Please notify the sender immediately that you have received this e-mail in error and delete the e-mail and any copies of it. Views and opinions expressed in this e-mail are those of the sender unless clearly stated as those of Siemens (Pty) Ltd. Siemens (Pty) Ltd accepts no liability for any loss or damage whatsoever, and howsoever incurred or suffered resulting or arising from the use of this e-mail communication and/or its attachments. Siemens (Pty) Ltd does not warrant the integrity of this e-mail communication nor that it is free of errors, viruses, interception or interference. Siemens (Pty) Ltd, its divisions and subsidiary companies (“Siemens”) expressly excludes sections 11, 12, and 13 of the Electronic Communications and Transactions Act, 25 of 2002 (“the ECT”) in respect of e-contracting. No data message or electronic communication will be recognised as having a legal contractual status under the ECT Act. All agreements concluded by Siemens will only be legally binding when reduced to physical writing and physically signed by a duly authorised representative of Siemens. For more information about Siemens (Pty) Ltd, visit our website at www.siemens.com<http://www.siemens.com> Siemens (Proprietary) Limited Company Registration Number: 1923/007514/07 Registered Address: 300 Janadel Avenue, Halfway House, 1685 VAT Registration Number: 4790104428 Chairman: Prof Dr S Russwurm * Chief Executive Officer: SG Proebstl * ; Chief Financial Officer: SU Dall’Omo * Executive Directors: C Klaas; R Nkuhlu Non-Executive Directors: R Guntermann *; Dr MI Survé Alternate Directors: I Amod; Dr H Grundmann * Company Secretary: T Llale * German ------------------------------------ * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
