Hi, the following list may not be "platform independant", but it may help you find out vulnerable software... samokk@pingoo:~$ apt-cache showpkg openssl Package: openssl Versions: 0.9.6e-1(/var/lib/apt/lists/ftp.rediris.es_pub_linux_distributions_debian_di sts_testing_main_binary-i386_Packages)(/var/lib/dpkg/status) Reverse Depends: wl-beta,openssl wl,openssl w3-el-e21,openssl w3-el-e20,openssl uw-imapd-ssl,openssl telnetd-ssl,openssl 0.9.2b sympa,openssl 0.9.5a sslwrap,openssl ssleay,openssl sendmail,openssl pyca,openssl 0.9.4 oav-update,openssl 0.9.6c libssl0.9.6,openssl 0.9.6-2 libio-socket-ssl-perl,openssl ipopd-ssl,openssl ftpd-ssl,openssl 0.9.2b ca-certificates,openssl apache-ssl,openssl 0.9.6 Dependencies: 0.9.6e-1 - libc6 (2 2.2.4-4) libssl0.9.6 (0 (null)) perl (0 (null)) ssleay (3 0.9.2b) Provides: 0.9.6e-1 - Reverse Provides: samokk@pingoo:~$ ;) sam ----- Original Message ----- From: "Patrick Brauch" <pab@ct.heise.de> To: <bugtraq@securityfocus.com> Sent: Thursday, August 15, 2002 5:49 PM Subject: Re: OpenSSL Vulnerabilities Hi, does anyone have an overview what programs, independent of platform, apart from browsers are vulnerable to this thing? (as a reminder, this is NOT about the certificate-vulnerability.. ;) cheerio, -- Patrick Brauch mailto: pab@ct.heise.de c't Magazin für Computertechnik http://www.heise.de/ct/ Fon: ++49 511/ 5352 300 Fax: ++49 511/ 5352 417 PGP-Key Fingerprint: 8366 03AC D702 F2BB C617 E6BC 1811 950E I have the heart of a small child. It sits on my desk in a jar.