Linux

Ask something
Discussion Locked

Version of OpenSSL

0 helpful
5 replies

by fimos

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
During a Pen-test for one of the clients, Nessus had reported that the version of OpenSSL installed has buffer overflow vulnerability (the version is older than 0.9.6.e).

I need to manually reconfirm the version of SSL installed on the server. The installation is on Netscape Proxy Server 3.6 (Sun OS 5.6)

Do let me know how do I manually determine the version of OpenSSL.

5 replies

by joematus

Grab the banner:

telnet host.foo.com 22

This should give you the banner telling you the version number.

by support

at the command line type in ....

openssl version

That works on linux, should be same on Sun.
If not go to your man pages for openssl or check you system package manager (e.g. in linux its rpm)

This discussion is closed to new replies.