topic Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software in Wireless

Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software

NSchn — Wed, 22 Apr 2015 01:25:05 GMT

Hello

The SSL-Library, which is installed through "PROSet/Wireless Software and Drivers (v17.16.0)", is very old and vulnerable.

Details:

In (Default-)Path ...

"c:\Program Files\Intel\CAM\bin\"

the file ...

"libeay32.dll"

in version v1.0.0.2 (v1.0.0b) from November 16, 2010!

The actual version of 1.0.0 branch is 1.0.0.18 (1.0.0s) from March 19, 2015!

For more infos see URL: https://www.openssl.org/ https://www.openssl.org/

Best regards,

Alpengreis

Re: Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software

ASouz7 — Wed, 22 Apr 2015 17:36:31 GMT

Hello Alpengreis,

Thank you for the information. We will check on this and will get back to you soon.

Re: Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software

NSchn — Sat, 30 May 2015 15:53:26 GMT

Hi Aleki,

Soon is relative - sorry, I could not resist ;-)

Greetings

Re: Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software

ASouz7 — Tue, 02 Jun 2015 21:14:49 GMT

Hello Alpengreis,

We are still checking and will provide you an answer as soon as possible. Unfortunately we cannot specify a date for this at this time.

Re: Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software

NSchn — Thu, 04 Jun 2015 01:12:31 GMT

Hi Aleki

Thanks for your response.

Probably you have nothing to do with the technical thing of this case. Nevertheless: a security-related matter should not take so long time IMHO!

BTW: I correct a typo here from my original post (OpenSSL, actual version): The actual version of 1.0.0 branch is 1.0.0.18 (1.0.0r) from March 19, 2015 (NOT 1.0.0.s) ...

Thank you.

Re: Old and vulnerable Open-SSL library from PROSet PROSet/Wireless Software

ASouz7 — Thu, 04 Jun 2015 16:44:58 GMT

Alpengreis,

Please know that in spite the time taken, we are working to provide the best answer possible. As soon as we have the answer we will let you know.

Your time and patience is much appreciated. Thank you.