Lucene search
Vulnerability Laboratory [Research Team]VULNERABLE:1254HistoryApr 09, 2014 - 12:00 a.m.
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-0900:00:00
Vulnerability Laboratory [Research Team]
www.vulnerability-lab.com
41
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.975 High
EPSS
Percentile
100.0%
Document Title:
===============
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
Release Date:
=============
2014-04-09
Vulnerability Laboratory ID (VL-ID):
====================================
1254
Discovery Status:
=================
Published
Exploitation Technique:
=======================
Report
Severity Level:
===============
Medium
Technical Details & Description:
================================
How to Fix the HeartBleed SSL Vulnerability (CVE-2014-0160) in Ubuntu with 10 easy steps!
1. First we login via terminal console to the ssh port (22)
2. Now, we use sudo or su to auth to work with root privileges
3. After the privileges upgrade to root we type `apt-get update` to update all installed core packages
4. Next command is `apt-get upgrade` to upgrade the already installed linux software packages
5. Now, we reboot the system with the following basic command `sudo reboot`
6. After the startup we access the server again via ssh client to port 22
7. We install the development package and upgrade the library itself via the following terminal command `sudo apt-get install openssl libssl-dev`
7. As next command we type in the command line `openssl version` (1.0.1) to review the newst installed version and package name
9. The following 2 commands shows all affected services that need to be restarted `ps uwwp $(sudo find /proc -maxdepth 2 -name maps -exec grep -HE `/libssl.so.* (deleted)` {} ; | cut -d/ -f3 | sort -u)`
or still running `ls -l /proc/*/fd | grep ssl.*(deleted)`
10. Last step is to reboot by usage of the basic `sudo reboot` to ensure the updates and upgrades was successful
May delete or overwirte important exisiting data
apt-get purge openssl
Clean the system automatically
apt-get autoremove && apt-get autoclean
Download and compile the newst version of openssl
wget https://www.openssl.org/source/openssl-1.0.1g.tar.gz
Inspect what is causing an error to pin - Old Repository & Co.
apt-cache policy openssl libssl-dev
Note: Remember that a verified certificate needs to be revoked to generate a new after a compromise.
------------- Reboot
analyst-updater@h2072833:~#
login as: analyst-updater
[email protected]\'s password:
Welcome to Debian 12.04.4 (GNU/Linux x86_64)
Last login: Wed Apr 9 12:00:55 2014 from xxx.dip0.ipconnect.com
analyst-updater@h2072833:~# openssl version
OpenSSL 1.0.1 14 Mar 2012
analyst-updater@h2072833:~# apt-get update
Hit ftp://ftp.ben-kenobi-server.net precise Release.gpg
Hit ftp://ftp.ben-kenobi-server.net precise-updates Release.gpg
Hit ftp://ftp.ben-kenobi-server.net precise-security Release.gpg
Hit ftp://ftp.ben-kenobi-server.net precise Release
Hit ftp://ftp.ben-kenobi-server.net precise-updates Release
Hit ftp://ftp.ben-kenobi-server.net precise-security Release
Hit ftp://ftp.ben-kenobi-server.net precise/main Sources
Hit ftp://ftp.ben-kenobi-server.net precise/restricted Sources
Hit ftp://ftp.ben-kenobi-server.net precise/universe Sources
Hit ftp://ftp.ben-kenobi-server.net precise/multiverse Sources
Hit ftp://ftp.ben-kenobi-server.net precise/main amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/restricted amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/universe amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/multiverse amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/main i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/restricted i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/universe i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/multiverse i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise/main TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise/multiverse TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise/restricted TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise/universe TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-updates/main Sources
Hit ftp://ftp.ben-kenobi-server.net precise-updates/restricted Sources
Hit ftp://ftp.ben-kenobi-server.net precise-updates/universe Sources
Hit ftp://ftp.ben-kenobi-server.net precise-updates/multiverse Sources
Hit ftp://ftp.ben-kenobi-server.net precise-updates/main amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/restricted amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/universe amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/multiverse amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/main i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/restricted i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/universe i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/multiverse i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-updates/main TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-updates/multiverse TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-updates/restricted TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-updates/universe TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-security/main Sources
Hit ftp://ftp.ben-kenobi-server.net precise-security/restricted Sources
Hit ftp://ftp.ben-kenobi-server.net precise-security/universe Sources
Hit ftp://ftp.ben-kenobi-server.net precise-security/multiverse Sources
Hit ftp://ftp.ben-kenobi-server.net precise-security/main amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/restricted amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/universe amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/multiverse amd64 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/main i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/restricted i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/universe i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/multiverse i386 Packages
Hit ftp://ftp.ben-kenobi-server.net precise-security/main TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-security/multiverse TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-security/restricted TranslationIndex
Hit ftp://ftp.ben-kenobi-server.net precise-security/universe TranslationIndex
Get:1 ftp://ftp.ben-kenobi-server.net precise/main Translation-en_GB [96.4 kB]
Hit ftp://ftp.ben-kenobi-server.net precise/main Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise/main Translation-de
Get:2 ftp://ftp.ben-kenobi-server.net precise/multiverse Translation-en_GB [79.8 kB]
Hit ftp://ftp.ben-kenobi-server.net precise/multiverse Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise/multiverse Translation-de
Get:3 ftp://ftp.ben-kenobi-server.net precise/restricted Translation-en_GB [2,406 B]
Hit ftp://ftp.ben-kenobi-server.net precise/restricted Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise/restricted Translation-de
Get:4 ftp://ftp.ben-kenobi-server.net precise/universe Translation-en_GB [5,492 B]
Hit ftp://ftp.ben-kenobi-server.net precise/universe Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise/universe Translation-de
Get:5 ftp://ftp.ben-kenobi-server.net precise-updates/main Translation-en_GB [96.4 kB]
Hit ftp://ftp.ben-kenobi-server.net precise-updates/main Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-updates/main Translation-de
Get:6 ftp://ftp.ben-kenobi-server.net precise-updates/multiverse Translation-en_GB [79.8 kB]
Hit ftp://ftp.ben-kenobi-server.net precise-updates/multiverse Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-updates/multiverse Translation-de
Get:7 ftp://ftp.ben-kenobi-server.net precise-updates/restricted Translation-en_GB [2,406 B]
Hit ftp://ftp.ben-kenobi-server.net precise-updates/restricted Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-updates/restricted Translation-de
Get:8 ftp://ftp.ben-kenobi-server.net precise-updates/universe Translation-en_GB [5,492 B]
Hit ftp://ftp.ben-kenobi-server.net precise-updates/universe Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-updates/universe Translation-de
Hit ftp://ftp.ben-kenobi-server.net precise-security/main Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-security/multiverse Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-security/restricted Translation-en
Hit ftp://ftp.ben-kenobi-server.net precise-security/universe Translation-en
Fetched 368 kB in 0s (808 kB/s)
Reading package lists... Done
analyst-updater@h2072833:~# apt-get upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 to upgrade, 0 to newly install, 0 to remove and 0 not to upgrade.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Do you want to continue [Y/n]? y
apache2 apache2-mpm-prefork apache2-prefork-dev apache2-utils apache2.2-bin
apache2.2-common ca-certificates clamav clamav-base clamav-freshclam file
icedtea-6-jre-cacao icedtea-6-jre-jamvm ifupdown initramfs-tools
initramfs-tools-bin libapache2-mod-php5 libclamav6 libgtk-3-0 libgtk-3-bin
libgtk-3-common libgudev-1.0-0 libgudev-1.0-0:i386 libmagic1 libnss3
libnss3:i386 libnss3-1d libpq-dev libpq5 librsvg2-2:i386
librsvg2-common:i386 libssl-dev libssl-doc libssl1.0.0 libssl1.0.0:i386
libudev0 libudev0:i386 linux-firmware openjdk-6-jre-headless
openjdk-6-jre-lib openssh-client openssh-server openssl php5 php5-cgi
php5-cli php5-common php5-curl php5-gd php5-mysql php5-sqlite php5-xsl
postgresql-9.1 postgresql-client-9.1 sudo tzdata tzdata-java udev udisks
59 to upgrade, 0 to newly install, 0 to remove and 0 not to upgrade.
1 not fully installed or removed.
Need to get 108 MB of archives.
After this operation, 4,201 kB of additional disk space will be used.
Do you want to continue [Y/n]? y
Get:1 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libssl-d oc all 1.0.1-4ubuntu5.12 [1,032 kB]
Get:2 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libssl-d ev amd64 1.0.1-4ubuntu5.12 [1,575 kB]
Get:3 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libssl1. 0.0 i386 1.0.1-4ubuntu5.12 [1,009 kB]
Get:4 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libssl1. 0.0 amd64 1.0.1-4ubuntu5.12 [1,048 kB]
Get:5 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libudev0 i386 175-0ubuntu9.5 [32.1 kB]
Get:6 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libudev0 amd64 175-0ubuntu9.5 [28.4 kB]
Get:7 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libgtk-3 -bin amd64 3.4.2-0ubuntu0.7 [15.9 kB]
Get:8 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libgtk-3 -0 amd64 3.4.2-0ubuntu0.7 [2,285 kB]
Get:9 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libgtk-3 -common all 3.4.2-0ubuntu0.7 [145 kB]
Get:10 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libgude v-1.0-0 i386 1:175-0ubuntu9.5 [14.6 kB]
Get:11 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libgude v-1.0-0 amd64 1:175-0ubuntu9.5 [14.5 kB]
Get:12 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libnss3 -1d amd64 3.15.4-0ubuntu0.12.04.2 [13.4 kB]
Get:13 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libnss3 i386 3.15.4-0ubuntu0.12.04.2 [1,292 kB]
Get:14 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libnss3 amd64 3.15.4-0ubuntu0.12.04.2 [1,229 kB]
Get:15 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main librsvg 2-common i386 2.36.1-0ubuntu1.1 [20.3 kB]
Get:16 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main librsvg 2-2 i386 2.36.1-0ubuntu1.1 [109 kB]
Get:17 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main file am d64 5.09-2ubuntu0.3 [19.7 kB]
Get:18 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libmagi c1 amd64 5.09-2ubuntu0.3 [217 kB]
Get:19 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main tzdata- java all 2014a-0ubuntu0.12.04 [126 kB]
Get:20 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main tzdata all 2014a-0ubuntu0.12.04 [448 kB]
Get:21 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-cg i amd64 5.3.10-1ubuntu3.11 [6,104 kB]
Get:22 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main openssl amd64 1.0.1-4ubuntu5.12 [523 kB]
Get:23 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main apache2 -prefork-dev amd64 2.2.22-1ubuntu1.5 [138 kB]
Get:24 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main apache2 amd64 2.2.22-1ubuntu1.5 [1,494 B]
Get:25 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main apache2 -mpm-prefork amd64 2.2.22-1ubuntu1.5 [2,400 B]
Get:26 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main apache2 .2-common amd64 2.2.22-1ubuntu1.5 [226 kB]
Get:27 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main apache2 .2-bin amd64 2.2.22-1ubuntu1.5 [1,339 kB]
Get:28 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main apache2 -utils amd64 2.2.22-1ubuntu1.5 [91.3 kB]
Get:29 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libapac he2-mod-php5 amd64 5.3.10-1ubuntu3.11 [3,137 kB]
Get:30 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-my sql amd64 5.3.10-1ubuntu3.11 [76.6 kB]
Get:31 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-xs l amd64 5.3.10-1ubuntu3.11 [14.0 kB]
Get:32 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-cu rl amd64 5.3.10-1ubuntu3.11 [28.0 kB]
Get:33 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-gd amd64 5.3.10-1ubuntu3.11 [38.8 kB]
Get:34 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-cl i amd64 5.3.10-1ubuntu3.11 [3,051 kB]
Get:35 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-sq lite amd64 5.3.10-1ubuntu3.11 [27.6 kB]
Get:36 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5-co mmon amd64 5.3.10-1ubuntu3.11 [1,797 kB]
Get:37 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main icedtea -6-jre-cacao amd64 6b30-1.13.1-1ubuntu2~0.12.04.3 [776 kB]
Get:38 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main openjdk -6-jre-lib all 6b30-1.13.1-1ubuntu2~0.12.04.3 [6,211 kB]
Get:39 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main icedtea -6-jre-jamvm amd64 6b30-1.13.1-1ubuntu2~0.12.04.3 [527 kB]
Get:40 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main openjdk -6-jre-headless amd64 6b30-1.13.1-1ubuntu2~0.12.04.3 [32.8 MB]
Get:41 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main sudo amd64 1.8.3p1-1ubuntu3.6 [299 kB]
Get:42 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main ifupdown amd64 0.7~beta2ubuntu11 [48.4 kB]
Get:43 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main initramfs-tools all 0.99ubuntu13.5 [49.0 kB]
Get:44 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main initramfs-tools-bin amd64 0.99ubuntu13.5 [9,782 B]
Get:45 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main udev amd64 175-0ubuntu9.5 [314 kB]
Get:46 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main ca-certificates all 20130906ubuntu0.12.04.1 [192 kB]
Get:47 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main openssh-server amd64 1:5.9p1-5ubuntu1.3 [338 kB]
Get:48 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main openssh-client amd64 1:5.9p1-5ubuntu1.3 [943 kB]
Get:49 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libclamav6 amd64 0.98.1+dfsg-4ubuntu1~ubuntu12.04.2 [4,208 kB]
Get:50 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main clamav-base all 0.98.1+dfsg-4ubuntu1~ubuntu12.04.2 [106 kB]
Get:51 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main clamav-freshclam amd64 0.98.1+dfsg-4ubuntu1~ubuntu12.04.2 [120 kB]
Get:52 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main clamav amd64 0.98.1+dfsg-4ubuntu1~ubuntu12.04.2 [140 kB]
Get:53 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libpq-dev amd64 9.1.13-0ubuntu0.12.04 [215 kB]
Get:54 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main libpq5 amd64 9.1.13-0ubuntu0.12.04 [93.0 kB]
Get:55 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main linux-firmware all 1.79.11 [27.7 MB]
Get:56 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main php5 all 5.3.10-1ubuntu3.11 [1,076 B]
Get:57 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main postgresql-9.1 amd64 9.1.13-0ubuntu0.12.04 [4,307 kB]
Get:58 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main postgresql-client-9.1 amd64 9.1.13-0ubuntu0.12.04 [959 kB]
Get:59 ftp://ftp.ben-kenobi-server.net/pub/linux/ubuntu/ precise-updates/main udisks amd64 1.0.4-5ubuntu2.2 [250 kB]
Fetched 108 MB in 26s (4,140 kB/s)
Extract templates from packages: 100%
Preconfiguring packages ...
(Reading database ... 159313 files and directories currently installed.)
Preparing to replace libssl-doc 1.0.1-4ubuntu5.11 (using .../libssl-doc_1.0.1-4ubuntu5.12_all.deb) ...
Unpacking replacement libssl-doc ...
Preparing to replace libssl-dev 1.0.1-4ubuntu5.11 (using .../libssl-dev_1.0.1-4ubuntu5.12_amd64.deb) ...
Unpacking replacement libssl-dev ...
Preparing to replace libssl1.0.0 1.0.1-4ubuntu5.11 (using .../libssl1.0.0_1.0.1-4ubuntu5.12_amd64.deb) ...
De-configuring libssl1.0.0:i386 ...
Unpacking replacement libssl1.0.0 ...
Preparing to replace libssl1.0.0:i386 1.0.1-4ubuntu5.11 (using .../libssl1.0.0_1.0.1-4ubuntu5.12_i386.deb) ...
Unpacking replacement libssl1.0.0:i386 ...
Processing triggers for man-db ...
Setting up libssl1.0.0 (1.0.1-4ubuntu5.12) ...
Setting up libssl1.0.0:i386 (1.0.1-4ubuntu5.12) ...
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
(Reading database ... 159313 files and directories currently installed.)
Preparing to replace libudev0:i386 175-0ubuntu9.4 (using .../libudev0_175-0ubuntu9.5_i386.deb) ...
De-configuring libudev0 ...
Unpacking replacement libudev0:i386 ...
Preparing to replace libudev0 175-0ubuntu9.4 (using .../libudev0_175-0ubuntu9.5_amd64.deb) ...
Unpacking replacement libudev0 ...
Setting up libudev0:i386 (175-0ubuntu9.5) ...
Setting up libudev0 (175-0ubuntu9.5) ...
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
(Reading database ... 159313 files and directories currently installed.)
Preparing to replace libgtk-3-bin 3.4.2-0ubuntu0.6 (using .../libgtk-3-bin_3.4.2-0ubuntu0.7_amd64.deb) ...
Leaving \'diversion of /usr/sbin/update-icon-caches to /usr/sbin/update-icon-caches.gtk2 by libgtk-3-bin\'
Leaving \'diversion of /usr/share/man/man8/update-icon-caches.8.gz to /usr/share/man/man8/update-icon-caches.gtk2.8.gz by libgtk-3-bin\'
Unpacking replacement libgtk-3-bin ...
Preparing to replace libgtk-3-0 3.4.2-0ubuntu0.6 (using .../libgtk-3-0_3.4.2-0ubuntu0.7_amd64.deb) ...
Unpacking replacement libgtk-3-0 ...
Preparing to replace libgtk-3-common 3.4.2-0ubuntu0.6 (using .../libgtk-3-common_3.4.2-0ubuntu0.7_all.deb) ...
Unpacking replacement libgtk-3-common ...
Preparing to replace libgudev-1.0-0:i386 1:175-0ubuntu9.4 (using .../libgudev-1.0-0_1%3a175-0ubuntu9.5_i386.deb) ...
De-configuring libgudev-1.0-0 ...
Unpacking replacement libgudev-1.0-0:i386 ...
Preparing to replace libgudev-1.0-0 1:175-0ubuntu9.4 (using .../libgudev-1.0-0_1%3a175-0ubuntu9.5_amd64.deb) ...
Unpacking replacement libgudev-1.0-0 ...
Processing triggers for man-db ...
Processing triggers for libglib2.0-0 ...
Processing triggers for libglib2.0-0:i386 ...
Setting up libgudev-1.0-0:i386 (1:175-0ubuntu9.5) ...
Setting up libgudev-1.0-0 (1:175-0ubuntu9.5) ...
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
(Reading database ... 159313 files and directories currently installed.)
Preparing to replace libnss3-1d 3.15.4-0ubuntu0.12.04.1 (using .../libnss3-1d_3.15.4-0ubuntu0.12.04.2_amd64.deb) ...
Unpacking replacement libnss3-1d ...
Preparing to replace libnss3:i386 3.15.4-0ubuntu0.12.04.1 (using .../libnss3_3.15.4-0ubuntu0.12.04.2_i386.deb) ...
De-configuring libnss3 ...
Unpacking replacement libnss3:i386 ...
Preparing to replace libnss3 3.15.4-0ubuntu0.12.04.1 (using .../libnss3_3.15.4-0ubuntu0.12.04.2_amd64.deb) ...
Unpacking replacement libnss3 ...
Setting up libnss3:i386 (3.15.4-0ubuntu0.12.04.2) ...
Setting up libnss3 (3.15.4-0ubuntu0.12.04.2) ...
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
(Reading database ... 159313 files and directories currently installed.)
Preparing to replace librsvg2-common:i386 2.36.1-0ubuntu1 (using .../librsvg2-common_2.36.1-0ubuntu1.1_i386.deb) ...
Unpacking replacement librsvg2-common:i386 ...
Preparing to replace librsvg2-2:i386 2.36.1-0ubuntu1 (using .../librsvg2-2_2.36.1-0ubuntu1.1_i386.deb) ...
Unpacking replacement librsvg2-2:i386 ...
Preparing to replace file 5.09-2ubuntu0.2 (using .../file_5.09-2ubuntu0.3_amd64.deb) ...
Unpacking replacement file ...
Preparing to replace libmagic1 5.09-2ubuntu0.2 (using .../libmagic1_5.09-2ubuntu0.3_amd64.deb) ...
Unpacking replacement libmagic1 ...
Preparing to replace tzdata-java 2013g-0ubuntu0.12.04 (using .../tzdata-java_2014a-0ubuntu0.12.04_all.deb) ...
Unpacking replacement tzdata-java ...
Preparing to replace tzdata 2013g-0ubuntu0.12.04 (using .../tzdata_2014a-0ubuntu0.12.04_all.deb) ...
Unpacking replacement tzdata ...
Processing triggers for libgdk-pixbuf2.0-0:i386 ...
Processing triggers for man-db ...
Setting up tzdata (2014a-0ubuntu0.12.04) ...
Current default time zone: \'Etc/GMT\'
Local time is now: Wed Apr 9 12:04:24 GMT 2014.
Universal Time is now: Wed Apr 9 12:04:24 UTC 2014.
Run \'dpkg-reconfigure tzdata\' if you wish to change it.
(Reading database ... 159289 files and directories currently installed.)
Preparing to replace php5-cgi 5.3.10-1ubuntu3.10 (using .../php5-cgi_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-cgi ...
Preparing to replace openssl 1.0.1-4ubuntu5.11 (using .../openssl_1.0.1-4ubuntu5.12_amd64.deb) ...
Unpacking replacement openssl ...
Preparing to replace apache2-prefork-dev 2.2.22-1ubuntu1.4 (using .../apache2-prefork-dev_2.2.22-1ubuntu1.5_amd64.deb) ...
Unpacking replacement apache2-prefork-dev ...
Preparing to replace apache2 2.2.22-1ubuntu1.4 (using .../apache2_2.2.22-1ubuntu1.5_amd64.deb) ...
Unpacking replacement apache2 ...
Preparing to replace apache2-mpm-prefork 2.2.22-1ubuntu1.4 (using .../apache2-mpm-prefork_2.2.22-1ubuntu1.5_amd64.deb) ...
* Stopping web server apache2 ... waiting . [ OK ]
Unpacking replacement apache2-mpm-prefork ...
Preparing to replace apache2.2-common 2.2.22-1ubuntu1.4 (using .../apache2.2-common_2.2.22-1ubuntu1.5_amd64.deb) ...
Unpacking replacement apache2.2-common ...
Preparing to replace apache2.2-bin 2.2.22-1ubuntu1.4 (using .../apache2.2-bin_2.2.22-1ubuntu1.5_amd64.deb) ...
Unpacking replacement apache2.2-bin ...
Preparing to replace apache2-utils 2.2.22-1ubuntu1.4 (using .../apache2-utils_2.2.22-1ubuntu1.5_amd64.deb) ...
Unpacking replacement apache2-utils ...
Preparing to replace libapache2-mod-php5 5.3.10-1ubuntu3.10 (using .../libapache2-mod-php5_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement libapache2-mod-php5 ...
Preparing to replace php5-mysql 5.3.10-1ubuntu3.10 (using .../php5-mysql_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-mysql ...
Preparing to replace php5-xsl 5.3.10-1ubuntu3.10 (using .../php5-xsl_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-xsl ...
Preparing to replace php5-curl 5.3.10-1ubuntu3.10 (using .../php5-curl_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-curl ...
Preparing to replace php5-gd 5.3.10-1ubuntu3.10 (using .../php5-gd_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-gd ...
Preparing to replace php5-cli 5.3.10-1ubuntu3.10 (using .../php5-cli_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-cli ...
Preparing to replace php5-sqlite 5.3.10-1ubuntu3.10 (using .../php5-sqlite_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-sqlite ...
Preparing to replace php5-common 5.3.10-1ubuntu3.10 (using .../php5-common_5.3.10-1ubuntu3.11_amd64.deb) ...
Unpacking replacement php5-common ...
Preparing to replace icedtea-6-jre-cacao 6b30-1.13.1-1ubuntu2~0.12.04.1 (using .../icedtea-6-jre-cacao_6b30-1.13.1-1ubuntu2~0.12.04.3_amd64.deb) ...
Unpacking replacement icedtea-6-jre-cacao ...
Preparing to replace openjdk-6-jre-lib 6b30-1.13.1-1ubuntu2~0.12.04.1 (using .../openjdk-6-jre-lib_6b30-1.13.1-1ubuntu2~0.12.04.3_all.deb) ...
Unpacking replacement openjdk-6-jre-lib ...
Preparing to replace icedtea-6-jre-jamvm 6b30-1.13.1-1ubuntu2~0.12.04.1 (using .../icedtea-6-jre-jamvm_6b30-1.13.1-1ubuntu2~0.12.04.3_amd64.deb) ...
Unpacking replacement icedtea-6-jre-jamvm ...
Preparing to replace openjdk-6-jre-headless 6b30-1.13.1-1ubuntu2~0.12.04.1 (using .../openjdk-6-jre-headless_6b30-1.13.1-1ubuntu2~0.12.04.3_amd64.deb) ...
Unpacking replacement openjdk-6-jre-headless ...
Preparing to replace sudo 1.8.3p1-1ubuntu3.4 (using .../sudo_1.8.3p1-1ubuntu3.6_amd64.deb) ...
Unpacking replacement sudo ...
Preparing to replace ifupdown 0.7~beta2ubuntu10 (using .../ifupdown_0.7~beta2ubuntu11_amd64.deb) ...
Unpacking replacement ifupdown ...
Preparing to replace initramfs-tools 0.99ubuntu13.4 (using .../initramfs-tools_0.99ubuntu13.5_all.deb) ...
Unpacking replacement initramfs-tools ...
Preparing to replace initramfs-tools-bin 0.99ubuntu13.4 (using .../initramfs-tools-bin_0.99ubuntu13.5_amd64.deb) ...
Unpacking replacement initramfs-tools-bin ...
Preparing to replace udev 175-0ubuntu9.4 (using .../udev_175-0ubuntu9.5_amd64.deb) ...
Adding \'diversion of /sbin/udevadm to /sbin/udevadm.upgrade by fake-udev\'
Unpacking replacement udev ...
Preparing to replace ca-certificates 20111211 (using .../ca-certificates_20130906ubuntu0.12.04.1_all.deb) ...
Unpacking replacement ca-certificates ...
Preparing to replace openssh-server 1:5.9p1-5ubuntu1.1 (using .../openssh-server_1%3a5.9p1-5ubuntu1.3_amd64.deb) ...
Unpacking replacement openssh-server ...
Preparing to replace openssh-client 1:5.9p1-5ubuntu1.1 (using .../openssh-client_1%3a5.9p1-5ubuntu1.3_amd64.deb) ...
Unpacking replacement openssh-client ...
Preparing to replace libclamav6 0.97.8+dfsg-1ubuntu1.12.04.1 (using .../libclamav6_0.98.1+dfsg-4ubuntu1~ubuntu12.04.2_amd64.deb) ...
Unpacking replacement libclamav6 ...
Preparing to replace clamav-base 0.97.8+dfsg-1ubuntu1.12.04.1 (using .../clamav-base_0.98.1+dfsg-4ubuntu1~ubuntu12.04.2_all.deb) ...
Unpacking replacement clamav-base ...
Preparing to replace clamav-freshclam 0.97.8+dfsg-1ubuntu1.12.04.1 (using .../clamav-freshclam_0.98.1+dfsg-4ubuntu1~ubuntu12.04.2_amd64.deb) ...
* Stopping ClamAV virus database updater freshclam [ OK ]
Unpacking replacement clamav-freshclam ...
Preparing to replace clamav 0.97.8+dfsg-1ubuntu1.12.04.1 (using .../clamav_0.98.1+dfsg-4ubuntu1~ubuntu12.04.2_amd64.deb) ...
Unpacking replacement clamav ...
Preparing to replace libpq-dev 9.1.12-0ubuntu0.12.04 (using .../libpq-dev_9.1.13-0ubuntu0.12.04_amd64.deb) ...
Unpacking replacement libpq-dev ...
Preparing to replace libpq5 9.1.12-0ubuntu0.12.04 (using .../libpq5_9.1.13-0ubuntu0.12.04_amd64.deb) ...
Unpacking replacement libpq5 ...
Preparing to replace linux-firmware 1.79.10 (using .../linux-firmware_1.79.11_all.deb) ...
Unpacking replacement linux-firmware ...
Preparing to replace php5 5.3.10-1ubuntu3.10 (using .../php5_5.3.10-1ubuntu3.11_all.deb) ...
Unpacking replacement php5 ...
Preparing to replace postgresql-9.1 9.1.12-0ubuntu0.12.04 (using .../postgresql-9.1_9.1.13-0ubuntu0.12.04_amd64.deb) ...
* Stopping PostgreSQL 9.1 database server [ OK ]
Unpacking replacement postgresql-9.1 ...
Preparing to replace postgresql-client-9.1 9.1.12-0ubuntu0.12.04 (using .../postgresql-client-9.1_9.1.13-0ubuntu0.12.04_amd64.deb) ...
Unpacking replacement postgresql-client-9.1 ...
Preparing to replace udisks 1.0.4-5ubuntu2.1 (using .../udisks_1.0.4-5ubuntu2.2_amd64.deb) ...
Unpacking replacement udisks ...
Processing triggers for man-db ...
Processing triggers for ureadahead ...
Processing triggers for ufw ...
Setting up bind9 (1:9.8.1.dfsg.P1-4ubuntu0.8) ...
* Starting domain name service... bind9 [fail]
invoke-rc.d: initscript bind9, action \"start\" failed.
dpkg: error processing bind9 (--configure):
subprocess installed post-installation script returned error exit status 1
Setting up libssl-doc (1.0.1-4ubuntu5.12) ...
Setting up libssl-dev (1.0.1-4ubuntu5.12) ...
Setting up libgtk-3-common (3.4.2-0ubuntu0.7) ...
Setting up libgtk-3-0 (3.4.2-0ubuntu0.7) ...
Setting up libgtk-3-bin (3.4.2-0ubuntu0.7) ...
Setting up libnss3-1d (3.15.4-0ubuntu0.12.04.2) ...
Setting up librsvg2-2:i386 (2.36.1-0ubuntu1.1) ...
Setting up librsvg2-common:i386 (2.36.1-0ubuntu1.1) ...
Setting up libmagic1 (5.09-2ubuntu0.3) ...
Setting up file (5.09-2ubuntu0.3) ...
Setting up tzdata-java (2014a-0ubuntu0.12.04) ...
Setting up php5-common (5.3.10-1ubuntu3.11) ...
Setting up php5-cgi (5.3.10-1ubuntu3.11) ...
Setting up openssl (1.0.1-4ubuntu5.12) ...
Setting up apache2.2-bin (2.2.22-1ubuntu1.5) ...
Setting up apache2-utils (2.2.22-1ubuntu1.5) ...
Setting up apache2.2-common (2.2.22-1ubuntu1.5) ...
Setting up apache2-prefork-dev (2.2.22-1ubuntu1.5) ...
Setting up apache2-mpm-prefork (2.2.22-1ubuntu1.5) ...
* Starting web server apache2 [ OK ]
Setting up apache2 (2.2.22-1ubuntu1.5) ...
Setting up libapache2-mod-php5 (5.3.10-1ubuntu3.11) ...
* Reloading web server config apache2 [ OK ]
Setting up php5-cli (5.3.10-1ubuntu3.11) ...
Setting up php5-mysql (5.3.10-1ubuntu3.11) ...
Setting up php5-xsl (5.3.10-1ubuntu3.11) ...
Setting up php5-curl (5.3.10-1ubuntu3.11) ...
Setting up php5-gd (5.3.10-1ubuntu3.11) ...
Setting up php5-sqlite (5.3.10-1ubuntu3.11) ...
Setting up sudo (1.8.3p1-1ubuntu3.6) ...
Installing new version of config file /etc/init.d/sudo ...
Setting up ifupdown (0.7~beta2ubuntu11) ...
Setting up initramfs-tools-bin (0.99ubuntu13.5) ...
Setting up ca-certificates (20130906ubuntu0.12.04.1) ...
Updating certificates in /etc/ssl/certs... 21 added, 9 removed; done.
Running hooks in /etc/ca-certificates/update.d....
Adding debian:Actalis_Authentication_analyst-updater_CA.pem
Adding debian:Buypass_Class_2_analyst-updater_CA.pem
Adding debian:Buypass_Class_3_analyst-updater_CA.pem
Adding debian:CA_Disig_analyst-updater_R1.pem
Adding debian:CA_Disig_analyst-updater_R2.pem
Adding debian:China_Internet_Network_Information_Center_EV_Certificates_analyst-updater.pem
Adding debian:D-TRUST_analyst-updater_Class_3_CA_2_2009.pem
Adding debian:D-TRUST_analyst-updater_Class_3_CA_2_EV_2009.pem
Adding debian:EC-ACC.pem
Adding debian:EE_Certification_Centre_analyst-updater_CA.pem
Adding debian:Hellenic_Academic_and_Research_Institutions_analyst-updaterCA_2011.pem
Adding debian:PSCProcert.pem
Adding debian:Security_Communication_analyst-updaterCA2.pem
Adding debian:StartCom_Certification_Authority_2.pem
Adding debian:StartCom_Certification_Authority_G2.pem
Adding debian:Swisscom_analyst-updater_CA_2.pem
Adding debian:Swisscom_analyst-updater_EV_CA_2.pem
Adding debian:Trustis_FPS_analyst-updater_CA.pem
Adding debian:T-TeleSec_Globalanalyst-updater_Class_3.pem
Adding debian:TURKTRUST_Certificate_Services_Provider_analyst-updater_2007.pem
Adding debian:Verisign_Class_3_Public_Primary_Certification_Authority_2.pem
Removing debian:cacert.org.pem
Removing debian:ca.pem
Removing debian:Equifax_Secure_eBusiness_CA_2.pem
Removing debian:TC_TrustCenter_Universal_CA_III.pem
Removing debian:TC_TrustCenter__Germany__Class_2_CA.pem
Removing debian:TC_TrustCenter__Germany__Class_3_CA.pem
Removing debian:Verisign_Class_2_Public_Primary_Certification_Authority.pem
Removing debian:Verisign_Class_4_Public_Primary_Certification_Authority_-_G2.pem
Removing debian:spi-ca-2003.pem
done.
done.
Setting up openssh-client (1:5.9p1-5ubuntu1.3) ...
Setting up openssh-server (1:5.9p1-5ubuntu1.3) ...
ssh stop/waiting
ssh start/running, process 14149
Setting up libclamav6 (0.98.1+dfsg-4ubuntu1~ubuntu12.04.2) ...
Setting up clamav-base (0.98.1+dfsg-4ubuntu1~ubuntu12.04.2) ...
Replacing config file /etc/clamav/clamd.conf with new version
Setting up clamav-freshclam (0.98.1+dfsg-4ubuntu1~ubuntu12.04.2) ...
Installing new version of config file /etc/init.d/clamav-freshclam ...
Replacing config file /etc/clamav/freshclam.conf with new version
* Starting ClamAV virus database updater freshclam [ OK ]
Setting up clamav (0.98.1+dfsg-4ubuntu1~ubuntu12.04.2) ...
Setting up libpq5 (9.1.13-0ubuntu0.12.04) ...
Setting up libpq-dev (9.1.13-0ubuntu0.12.04) ...
Setting up linux-firmware (1.79.11) ...
Setting up php5 (5.3.10-1ubuntu3.11) ...
Setting up postgresql-client-9.1 (9.1.13-0ubuntu0.12.04) ...
Setting up postgresql-9.1 (9.1.13-0ubuntu0.12.04) ...
* Starting PostgreSQL 9.1 database server [ OK ]
Setting up openjdk-6-jre-headless (6b30-1.13.1-1ubuntu2~0.12.04.3) ...
Setting up openjdk-6-jre-lib (6b30-1.13.1-1ubuntu2~0.12.04.3) ...
Setting up icedtea-6-jre-cacao (6b30-1.13.1-1ubuntu2~0.12.04.3) ...
Setting up icedtea-6-jre-jamvm (6b30-1.13.1-1ubuntu2~0.12.04.3) ...
Setting up udev (175-0ubuntu9.5) ...
udev stop/waiting
udev start/running, process 16013
Removing \'diversion of /sbin/udevadm to /sbin/udevadm.upgrade by fake-udev\'
update-initramfs: deferring update (trigger activated)
Setting up udisks (1.0.4-5ubuntu2.2) ...
Setting up initramfs-tools (0.99ubuntu13.5) ...
update-initramfs: deferring update (trigger activated)
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
Processing triggers for libgdk-pixbuf2.0-0:i386 ...
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-3.2.0-60-generic
Setting up bind9 (1:9.8.1.dfsg.P1-4ubuntu0.8) ...
* Starting domain name service... bind9 [fail]
invoke-rc.d: initscript bind9, action \"start\" failed.
dpkg: error processing bind9 (--configure):
subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
bind9
E: Sub-process /usr/bin/dpkg returned an error code (1)
analyst-updater@h2072833:~# ps uwwp $(sudo find /proc -maxdepth 2 -name maps -exec grep -HE \'/libssl\\.so.* \\(deleted\\)\' {} \\; | cut -d/ -f3 | sort -u)
ERROR: List of process IDs must follow p.
********* simple selection ********* ********* selection by list *********
-A all processes -C by command name
-N negate selection -G by real group ID (supports names)
-a all w/ tty except session leaders -U by real user ID (supports names)
-d all except session leaders -g by session OR by effective group name
-e all processes -p by process ID
T all processes on this terminal -s processes in the sessions given
a all w/ tty, including other users -t by tty
g OBSOLETE -- DO NOT USE -u by effective user ID (supports names)
r only running processes U processes for specified users
x processes w/o controlling ttys t by tty
*********** output format ********** *********** long options ***********
-o,o user-defined -f full --Group --User --pid --cols --ppid
-j,j job control s signal --group --user --sid --rows --info
-O,O preloaded -o v virtual memory --cumulative --format --deselect
-l,l long u user-oriented --sort --tty --forest --version
-F extra full X registers --heading --no-heading --context
********* misc options *********
-V,V show version L list format codes f ASCII art forest
-m,m,-L,-T,H threads S children in sum -y change -l format
-M,Z security data c true command name -c scheduling class
-w,w wide output n numeric WCHAN,UID -H process hierarchy
analyst-updater@h2072833:~# ls -l /proc/*/fd | grep ssl.*(deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
l-wx------ 1 analyst-updater analyst-updater 64 Apr 9 12:23 16 -> /run/apache2/ssl_mutex (deleted)
analyst-updater@h2072833:~# openssl version
OpenSSL 1.0.1 14 Mar 2012
analyst-updater@h2072833:~# sudo reboot
Broadcast message from [email protected]
(/dev/pts/0) at 12:16 ...
The system is going down for reboot NOW!
Picture(s):
http://www.vulnerability-lab.com/resources/pictures/1.png
http://www.vulnerability-lab.com/resources/pictures/2.png
Credits & Authors:
==================
Vulnerability Laboratory [Research Team]
Disclaimer & Information:
=========================
The information provided in this advisory is provided as it is without any warranty. Vulnerability-Lab disclaims all warranties,
either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business
profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some
states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation
may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases
or trade with fraud/stolen material.
Domains: www.vulnerability-lab.com - www.vuln-lab.com - www.vulnerability-lab.com/register
Contact: [email protected] - [email protected] - [email protected]
Section: video.vulnerability-lab.com - forum.vulnerability-lab.com - news.vulnerability-lab.com
Social: twitter.com/#!/vuln_lab - facebook.com/VulnerabilityLab - youtube.com/user/vulnerability0lab
Feeds: vulnerability-lab.com/rss/rss.php - vulnerability-lab.com/rss/rss_upcoming.php - vulnerability-lab.com/rss/rss_news.php
Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory.
Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other
media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, sourcecode, videos and
other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed),
modify, use or edit our material contact ([email protected] or [email protected]) to get a permission.
Copyright © 2012 | Vulnerability Laboratory
Related
nessus
nessus
openSUSE Security Update : openssl (openSUSE-SU-2014:0492-1) (Heartbleed)
2014-06-13 00:00:00
OpenVPN Heartbeat Information Disclosure (Heartbleed)
2014-04-14 00:00:00
Websense Web Security Heartbeat Information Disclosure (Heartbleed)
2014-04-29 00:00:00
ibm
ibm
checkpoint_security
checkpoint_security
Check Point response to OpenSSL vulnerability (CVE-2014-0160)
2014-04-07 21:00:00
securityvulns
securityvulns
n0where
n0where
Access Point Impersonation Attacks: hostapd-wpe
2016-04-12 22:19:39
seebug
seebug
IBM AIX OpenSSL TLS心跳信息泄漏漏洞
2014-04-16 00:00:00
BlackBerry Link OpenSSL TLS心跳信息泄漏漏洞
2014-04-16 00:00:00
Sophos Antivirus for vShield OpenSSL TLS心跳信息泄漏漏洞
2014-04-16 00:00:00
hp
hp
fortinet
fortinet
Information Disclosure Vulnerability in OpenSSL (Heartbleed)
2014-04-08 00:00:00
suse
suse
update for openssl (important)
2014-04-08 13:04:15
thn
thn
HeartBleed Bug Explained - 10 Most Frequently Asked Questions
2014-04-14 20:40:00
Heartbleed - OpenSSL Zero-day Bug leaves Millions of websites Vulnerable
2014-04-08 08:23:00
How to Protect yourself from the 'Heartbleed' Bug
2014-04-10 07:58:00
openvas
openvas
CentOS Update for openssl CESA-2014:0376 centos6
2014-04-08 00:00:00
Debian: Security Advisory (DSA-2896-1)
2014-04-06 00:00:00
Mageia: Security Advisory (MGASA-2014-0256)
2022-01-28 00:00:00
exploitpack
exploitpack
OpenSSL TLS Heartbeat Extension - Heartbleed Memory Disclosure
2014-04-08 00:00:00
attackerkb
attackerkb
CVE-2014-0160 (AKA: Heartbleed)
2014-04-07 00:00:00
vulnerlab
vulnerlab
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
f5
f5
K15159 : OpenSSL vulnerability CVE-2014-0160
2015-02-16 00:00:00
SOL15159 - OpenSSL vulnerability CVE-2014-0160
2014-04-08 00:00:00
zdt
zdt
OpenSSL Heartbeat (Heartbleed) Information Leak Exploit
2014-04-10 00:00:00
Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support
2014-04-24 00:00:00
packetstorm
packetstorm
Heartbleed Proof Of Concept
2014-04-08 00:00:00
Heartbleed User Session Extraction
2014-04-09 00:00:00
OpenSSL TLS Heartbeat Extension Memory Disclosure
2014-04-08 00:00:00
atlassian
atlassian
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
ics
ics
ABB Relion 650 Series OpenSSL Vulnerability (Update A)
2018-09-06 12:00:00
Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability
2018-08-27 12:00:00
Unified Automation OPC SDK OpenSSL Vulnerability
2018-09-06 12:00:00
ubuntucve
ubuntucve
CVE-2014-0160
2014-04-07 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-04-07 00:00:00
qt
qt
Heartbleed Bug (CVE-2014-0160) and Qt
2014-04-10 00:00:00
hackerone
hackerone
Concrete CMS: https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)
2014-04-08 11:01:31
Mail.ru: OpenSSL HeartBleed (CVE-2014-0160)
2014-10-23 15:12:13
Internet Bug Bounty: TLS heartbeat read overrun
2014-04-05 23:51:06
myhack58
myhack58
redhat
redhat
(RHSA-2014:0376) Important: openssl security update
2014-04-08 00:00:00
(RHSA-2014:0396) Important: rhev-hypervisor6 security update
2014-04-10 00:00:00
threatpost
threatpost
Tor Blacklisting Exit Nodes Vulnerable to Heartbleed Bug
2014-04-17 11:40:41
April 2014 Oracle Critical Patch Update
2014-04-16 12:32:06
Oracle Gives Heartbleed Update, Patches 14 Products
2014-04-21 13:55:42
centos
centos
openssl security update
2014-04-08 02:54:58
kitploit
kitploit
Heartbleed Vulnerability Scanner - Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)
2015-10-01 09:47:00
Collection of Heartbleed Tools (OpenSSL CVE-2014-0160)
2014-04-10 00:55:00
sslscan - tests SSL/TLS enabled services to discover supported cipher suites
2016-12-26 14:30:00
cisco
cisco
OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products
2014-04-09 03:00:00
OpenSSL TLS/DTLS Heartbeat Information Disclosure Vulnerability
2014-04-08 14:39:29
debiancve
debiancve
CVE-2014-0160
2014-04-07 22:55:00
cert
cert
osv
osv
openssl - security update
2014-04-07 00:00:00
intel
intel
Multiple Intel Software Products and API Services impacted by CVE-2014-0160
2014-04-30 00:00:00
symantec
symantec
prion
prion
Buffer overflow
2014-04-07 22:55:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-0160
2014-04-07 00:00:00
debian
debian
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
[SECURITY] [DSA 2896-1] openssl security update
2014-04-07 21:36:46
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
veracode
veracode
Information Disclosure Through Buffer Over-read
2019-01-15 09:00:11
malwarebytes
malwarebytes
Five years later, Heartbleed vulnerability still unpatched
2019-09-12 15:00:00
freebsd
freebsd
OpenSSL -- Remote Information Disclosure
2014-04-07 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)
2014-12-28 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.975 High
EPSS
Percentile
100.0%
Related for VULNERABLE:1254