Internet Security Components - COM, ActiveX and .NET

HeartBleed attack vulnerability - WeOnlyDo Discussion board

Linear

Hello,

we're using wodSSHServer/wodSSHClient components (different versions) in some of our products. I can see that for FIPS complaincy we need to provide for your component also libeay32.dll and ssleay32.dll libraries from OpenSLL.

Are your *SSH* components (and our customers) vulnerable against HeartBleed attack?

Thanks,
Jan Manek

locked

7290 views

Jan,

hi. We use OpenSSL version 0.9.8y so we're not affected by Heartbleed bug.

Hope this helps!
Kreso

locked

7177 views

Do you mean the latest version of SSH Server?

What about older versions? We're using that component for years and the customers can have installed older versions.

Thanks,
Jan Manek

locked

7212 views

Jan,

older version too, they used older 0.9.8 revisions then.

Kreso

locked

7130 views

Hi!

I can find "SSH-2.0-WeOnlyDo 2.1.3" from freeSSHd software. Could you confirm is the library provided by you (SSH-2.0-WeOnlyDo 2.1.3) affected for HeartBleed attack vulnerability?

Thanks

locked

7092 views

Hi.

None of WeOnlyDo libraries are vulnerable to Heartbleed.

Hope this helps!
Kreso

locked

6932 views

...your service has been phenomenal. It's always quick and you are there when I need you.

James Newman

Castleberry Investments

Thank you very much for the rapid responses. I was a little nervous about dealing with a company that is on a different continent from me. You have proven my concerns to be unfounded.

Robert Pacheco

Surebridge, Inc.